CVE-2026-119670: Vulnerabilities in spring-context, logback-core and Another JSON Schema Validator might affect IBM Storage Defender Copy Data Management

Q: What access does an attacker need to exploit this issue?

An attacker must be authenticated to IBM Storage Copy Data Management. Exploitation does not require user interaction and can be performed over the network.

Q: What could a successful attacker do?

A successful attacker could execute arbitrary commands using normal user privileges on the affected system. The reported impact includes loss of confidentiality, integrity, and availability at a low level.

Q: Which product version is identified as affected?

The advisory identifies IBM Storage Copy Data Management version 2.2 as affected.

Published Nov 3, 2026

Updated

IBM Storage Copy Data Management could allow an authenticated user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input.

Other sources

IBM Storage Copy Data Management 2.2 could allow an authenticated user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input.

— MITRE

Affected Software

1 affected component

IBM Storage Copy Data Management<=2.2

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade IBM Storage Copy Data Management to a version that resolves this vulnerability.
Fixed in 2.3.2.0

Event History

Nov 3, 2026

CVE Published

via IBM·12:00 AM

Data Sourced

via IBM·12:00 AM

DescriptionAffected Software

Nov 8, 2026

CVE Published

via MITRE·05:08 PM

Data Sourced

via MITRE·05:08 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·05:16 PM

DescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

IBM-7295286

Frequently Asked Questions

What access does an attacker need to exploit this issue?

An attacker must be authenticated to IBM Storage Copy Data Management. Exploitation does not require user interaction and can be performed over the network.

What could a successful attacker do?

A successful attacker could execute arbitrary commands using normal user privileges on the affected system. The reported impact includes loss of confidentiality, integrity, and availability at a low level.

Which product version is identified as affected?

The advisory identifies IBM Storage Copy Data Management version 2.2 as affected.

CVE-2026-119670: Vulnerabilities in spring-context, logback-core and Another JSON Schema Validator might affect IBM Storage Defender Copy Data Management

Other sources

Affected Software

Remediation

Event History

Parent advisories

Frequently Asked Questions

What access does an attacker need to exploit this issue?

What could a successful attacker do?

Which product version is identified as affected?

Company

Resources

Contact

Frequently Asked Questions

What access does an attacker need to exploit this issue?

What could a successful attacker do?

Which product version is identified as affected?