CVE-2022-22426
- State
- Published
- Severity
- 2.9 Low
- Published
- Jun 10, 2022
- Updated
- Sep 16, 2024
- Reserved
- Jan 3, 2022
Description
IBM Spectrum Copy Data Management Admin 2.2.0.0 through 2.2.15.0 could allow a local attacker to bypass authentication restrictions, caused by the lack of proper session management. An attacker could exploit this vulnerability to bypass authentication and gain unauthorized access to the Spectrum Copy Data Management catalog which contains metadata. IBM X-Force ID: 223718.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.0 | 2.9 Low | CVSS:3.0/A:N/AC:H/I:N/S:U/C:L/UI:N/AV:L/PR:N/RC:C/RL:O/E:U | ibm |
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
Spectrum Copy Data ManagementIBM |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.