CVE-2021-39065

published 2021-12-13

CVE-2021-39065: IBM Spectrum Copy Data Management 2.2.13 and earlier could allow a remote attacker to execute arbitrary commands on the system, caused by improper validation…

critical 9.8 CVSS 3.1

AV N AC L PR N UI N S U C H I H A H

IBM Spectrum Copy Data Management 2.2.13 and earlier could allow a remote attacker to execute arbitrary commands on the system, caused by improper validation of user-supplied input by the Spectrum Copy Data Management Admin Console login and uploadcertificate function . A remote attacker could inject arbitrary shell commands which would be executed on the affected system. IBM X-Force ID: 214958.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
ibm	spectrum_copy_data_management	<= 2.2.13	—
ibm	spectrum_copy_data_management	—	—

CWE-78 CWE-20