CVE-2023-38730mediumCWE-327

CVE-2023-38730: medium-severity vulnerability in IBM Spectrum Copy Data Management

IBM Spectrum Copy Data Management information disclosure

Published · Updated

Follow this CVE+ Monitor Spectrum Copy Data Management

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.9epss 0.4%
IBM Storage Copy Data Management 2.2.0.0 through 2.2.19.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 262268.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected products
IBM · Spectrum Copy Data Management
Related CVEs — IBM Spectrum Copy Data Management

In the same product, most dangerous first.

CVE-2021-39065HIGHCVE-2021-39065EPSS 2.2%CVE-2021-39053MEDIUMCVE-2021-39053EPSS 1.7%CVE-2021-39064MEDIUMCVE-2021-39064EPSS 1.4%CVE-2022-31769MEDIUMCVE-2022-31769EPSS 1.2%CVE-2021-39052MEDIUMCVE-2021-39052EPSS 1.2%CVE-2022-22354MEDIUMCVE-2022-22354EPSS 0.9%