6.2
Medium
CVE-2022-22354 IBM Spectrum Protect Plus 10.1.0.0 through 10.1.9.2 and IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.14.3 do…
Description
IBM Spectrum Protect Plus 10.1.0.0 through 10.1.9.2 and IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.14.3 do not limit the length of a connection which could allow for a Slowloris HTTP denial of service attack to take place. This can cause the Admin Console to become unresponsive. IBM X-Force ID: 220485.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Spectrum Copy Data Management 2.2 | 2.2.0.0 → 2.2.14.3 | No fix stated |
| Spectrum Protect Plus 10.1 | 10.1.0.0 → 10.1.9.2 | No fix stated |
Other CVEs of Spectrum Copy Data Management
The 17 CVEs of Spectrum Copy Data Management →
CVE-2023-38730
IBM Storage Copy Data Management 2.2.0.0 through 2.2.19.0 uses weaker than expected cryptographic algorithms that…
5.9
Medium
CVE-2022-31769
IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.15.0 could allow a remote attacker to view product configuration…
5.3
Medium
CVE-2022-30611
IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.15.0 is vulnerable to cross-site scripting, caused by improper…
5.4
Medium
CVE-2022-30610
IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.15.0 is vulnerable to reverse tabnabbing where it could allow a…
4.4
Medium