CVE-2021-39052

CWE-863 — Incorrect Authorization3 documents3 sources

Severity

9.8CRITICAL

EPSS

0.5%

top 33.77%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

IBM Spectrum Copy Data Management

Timeline

PublishedDec 13

Latest updateDec 14

Description

IBM Spectrum Copy Data Management 2.2.13 and earlier could allow a remote attacker to access the Spring Boot console without authorization. IBM X-Force ID: 214523.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages2 packages

▶NVDibm/spectrum_copy_data_management2.2.13

▶CVEListV5ibm/spectrum_copy_data_management2.2.13

Patches

Patch: www.ibm.com ↗Patch: www.ibm.com ↗

🔴Vulnerability Details

GHSA

GHSA-mqq4-vjgx-22jj: IBM Spectrum Copy Data Management 2↗2021-12-14

▶

CVEList

CVE-2021-39052: IBM Spectrum Copy Data Management 2↗2021-12-13

▶