CVE-2022-22426: IBM Spectrum Copy Data Management

Low severity, CVSS 3.3. EPSS: 0.2% chance of exploitation in the next 30 days.

IBM Spectrum Copy Data Management Admin 2.2.0.0 through 2.2.15.0 could allow a local attacker to bypass authentication restrictions, caused by the lack of proper session management. An attacker could exploit this vulnerability to bypass authentication and gain unauthorized access to the Spectrum Copy Data Management catalog which contains metadata. IBM X-Force ID: 223718.

Affected products

• IBM Spectrum Copy Data Management: from 2.2.0.0, up to and including 2.2.15.0

Published 2022-06-10. Last modified 2026-06-17.