Vulnerability Details CVE-2021-39065
IBM Spectrum Copy Data Management 2.2.13 and earlier could allow a remote attacker to execute arbitrary commands on the system, caused by improper validation of user-supplied input by the Spectrum Copy Data Management Admin Console login and uploadcertificate function . A remote attacker could inject arbitrary shell commands which would be executed on the affected system. IBM X-Force ID: 214958.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.023
EPSS Ranking 83.9%
CVSS Severity
CVSS v3 Score 8.1
CVSS v2 Score 10.0
References
Products affected by CVE-2021-39065
-
cpe:2.3:a:ibm:spectrum_copy_data_management:2.2.0.0
-
cpe:2.3:a:ibm:spectrum_copy_data_management:2.2.13
-
cpe:2.3:o:linux:linux_kernel:-