CVE-2021-39053

IBM Spectrum Copy Data Management 2.2.13 and earlier could allow a remote attacker to obtain sensitive information, caused by the improper handling of requests…

Medium · published December 13, 2021

CVSS v3.0
5.9
EPSS
2%
Percentile
77.5
In the wild
Unconfirmed
What it is

IBM Spectrum Copy Data Management 2.2.13 and earlier could allow a remote attacker to obtain sensitive information, caused by the improper handling of requests for Spectrum Copy Data Management Admin Console. By sending a specially-crafted request, a remote attacker could exploit this vulnerability to obtain sensitive information. IBM X-Force ID: 214524.

The record
Technical detail
CVSS v3.0
5.9 · MEDIUM
Vector
CVSS:3.0/I:N/UI:N/AC:H/A:N/S:U/PR:N/C:H/AV:N/RC:C/RL:O/E:U
CVSS v4.0
Not supplied
EPSS
0.01735 · 77.5th percentile
Published
2021-12-13T17:55Z
EPSS history
Timeline
  • 13 DEC 17:55Z
    IBM Spectrum Copy Data Management 2.2.13 and earlier could allow a remote attacker to obtain sensitive information, caused by the improper handling of requests…
    cvelistv5