Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2021-39051

EPSS 0.12% · P30
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2021-39051

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
IBM Spectrum Copy Data Management 2.2.0.0 through 2.2.14.3 is vulnerable to server-side request forgery, caused by improper input of application server registration function. A remote attacker could exploit this vulnerability using the host address and port fields of the application server registration form in the portal UI to enumerate and attack services that are running on those hosts. IBM X-Force ID: 214441.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
IBM Spectrum Copy Data Management代码问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
IBM Spectrum Copy Data Management是美国国际商业机器公司(IBM)的实现数据中心副本管理流程的现代化、简化和自动化。 IBM Spectrum Copy Data Management 存在安全漏洞,这是由于应用服务器注册功能输入不当造成的。远程攻击者可以利用门户 UI 中应用程序服务器注册表单的主机地址和端口字段来利用此漏洞枚举和攻击在这些主机上运行的服务。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
IBMSpectrum Copy Data Management 2.2.0.0 -

II. Public POCs for CVE-2021-39051

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2021-39051

登录查看更多情报信息。

Same Patch Batch · IBM · 2022-03-14 · 8 CVEs total

CVE-2021-39055IBM Spectrum Copy Data Management 跨站脚本漏洞
CVE-2022-22344IBM Spectrum Copy Data Management 注入漏洞
CVE-2022-22354IBM Spectrum Protect Plus和IBM Spectrum Copy Data Management 安全漏洞
CVE-2021-38971IBM Data Virtualization(DV) on Cloud Pak for Data(CPD) 安全漏洞
CVE-2022-22346IBM Spectrum Protect Operations Center 跨站请求伪造漏洞
CVE-2022-22348IBM Spectrum Protect Operations Center跨站请求伪造漏洞
CVE-2022-22353IBM Cloud Pak for Data 安全漏洞

IV. Related Vulnerabilities

V. Comments for CVE-2021-39051

No comments yet


Leave a comment