CVE-2021-39064medium

CVE-2021-39064: medium-severity vulnerability in IBM Spectrum Copy Data Management

Published · Updated

Follow this CVE+ Monitor Spectrum Copy Data Management

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.9epss 1.4%
IBM Spectrum Copy Data Management 2.2.13 and earlier has weak authentication and password rules and incorrectly handles default credentials for the Spectrum Copy Data Management Admin console. IBM X-Force ID: 214957.
CVSS:3.0/S:U/PR:N/A:N/AC:H/I:N/UI:N/AV:N/C:H/E:U/RC:C/RL:O
Affected products
IBM · Spectrum Copy Data Management
Related CVEs — IBM Spectrum Copy Data Management

In the same product, most dangerous first.

CVE-2021-39065HIGHCVE-2021-39065EPSS 2.2%CVE-2021-39053MEDIUMCVE-2021-39053EPSS 1.7%CVE-2022-31769MEDIUMCVE-2022-31769EPSS 1.2%CVE-2021-39052MEDIUMCVE-2021-39052EPSS 1.2%CVE-2022-22354MEDIUMCVE-2022-22354EPSS 0.9%CVE-2021-39051MEDIUMCVE-2021-39051EPSS 0.9%