| Package | Affected versions | Patched versions |
|---|---|---|
| spectrum copy data management | ≤ 2.2.13 |
IBM Spectrum Copy Data Management 2.2.13 and earlier could allow a remote attacker to execute arbitrary commands on the system, caused by improper validation of user-supplied input by the Spectrum Copy Data Management Admin Console login and uploadcertificate function . A remote attacker could inject arbitrary shell commands which would be executed on the affected system. IBM X-Force ID: 214958.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free