CVE-2021-39053: IBM Spectrum Copy Data Management

High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days.

IBM Spectrum Copy Data Management 2.2.13 and earlier could allow a remote attacker to obtain sensitive information, caused by the improper handling of requests for Spectrum Copy Data Management Admin Console. By sending a specially-crafted request, a remote attacker could exploit this vulnerability to obtain sensitive information. IBM X-Force ID: 214524.

Affected products

  • IBM Spectrum Copy Data Management: up to and including 2.2.13

Published 2021-12-13. Last modified 2026-06-17.