CVE-2022-22426 LOW

CVE-2022-22426

Vendor Ibm
Product Spectrum Copy Data Management
Published June 10, 2022
Last update September 16, 2024

CVSS base score

2.9/10
Attack vector Local
Attack complexity High
Privileges required None
User interaction None
Confidentiality Low
Integrity None

CVSS vector

CVSS:3.0/A:N/AC:H/I:N/S:U/C:L/UI:N/AV:L/PR:N/RC:C/RL:O/E:U

What the vulnerability does

01Description

IBM Spectrum Copy Data Management Admin 2.2.0.0 through 2.2.15.0 could allow a local attacker to bypass authentication restrictions, caused by the lack of proper session management. An attacker could exploit this vulnerability to bypass authentication and gain unauthorized access to the Spectrum Copy Data Management catalog which contains metadata. IBM X-Force ID: 223718.

Key dates

02Disclosure timeline

June 10, 2022 CVE published
September 16, 2024 Record updated