CVE-2026-119670 PUBLISHED

Vulnerabilities in spring-context, logback-core and Another JSON Schema Validator might affect IBM Storage Defender Copy Data Management

Assigner: ibm
Reserved: 30.10.2026 Published: 08.11.2026 Updated: 08.11.2026

IBM Storage Copy Data Management 2.2 could allow an authenticated user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input.

Metrics

CVSS 3.1

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS Score: 6.3

Attack Vector	Network	Scope	Unchanged
Attack Complexity	Low	Confidentiality Impact	Low
Privileges Required	Low	Integrity Impact	Low
User Interaction	None	Availability Impact	Low

CVSS 3.1

Product Status

Vendor	IBM
Product	Storage Copy Data Management
Versions	Version 2.2 is affected

Solutions

Affected Versions Fixing LevelPlatformLink to Fix and Instructions2.2.0.0 - 2.3.1.02.3.2.0Linux

https://www.ibm.com/support/pages/node/7288658

References

https://www.ibm.com/support/pages/node/7295286

Problem Types

CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CWE