PT-2022-20916 · Ibm · Ibm Spectrum Copy Data Management

CVE-2022-31769

·

Published

2022-06-10

·

Updated

2023-08-08

CVSS v3.1

5.3

Medium

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions IBM Spectrum Copy Data Management versions 2.2.0.0 through 2.2.15.0
Description The issue allows a remote attacker to view product configuration information stored in PostgreSQL, which could be used in further attacks against the system.
Recommendations For versions 2.2.0.0 through 2.2.15.0, consider restricting access to the PostgreSQL database to minimize the risk of exploitation. As a temporary workaround, restrict access to sensitive product configuration information until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾

Related Identifiers

CVE-2022-31769

Affected Products

Ibm Spectrum Copy Data Management