GHSA-q9m8-mcx4-3j84

GHSA-q9m8-mcx4-3j84 PUBLISHED CVSS 7.5 HIGH

Record from GitHub Advisory Database · Published December 14, 2021

IBM Spectrum Copy Data Management 2.2.13 and earlier has weak authentication and password rules and incorrectly handles default credentials for the Spectrum Copy Data Management Admin console. IBM X-Force ID: 214957.

Risk scores

CVSS 3.1

7.5

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Timeline

Dec 14, 2021 CVE Published
Apr 9, 2026 Security Advisory

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln GHSA-q9m8-mcx4-3j84
vulnetix vdb fixes GHSA-q9m8-mcx4-3j84

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/GHSA-q9m8-mcx4-3j84/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

https://www.ibm.com/support/pages/node/6525554 url
https://nvd.nist.gov/vuln/detail/CVE-2021-39064 advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/214957 url

Look up in the Resolve Platform →