CVE Vulnerabilities

CVE-2021-38974

Published: Nov 15, 2021 | Modified: Nov 16, 2021
CVSS 3.x
6.5
MEDIUM
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS 2.x
4 MEDIUM
AV:N/AC:L/Au:S/C:N/I:N/A:P
RedHat/V2
RedHat/V3
Ubuntu

IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 could allow an authenticated user to cause a denial of service using specially crafted HTTP requests. IBM X-Force ID: 212779.

Affected Software

Name Vendor Start Version End Version
Security_guardium_key_lifecycle_manager Ibm 4.1.0 (including) 4.1.0 (including)
Security_guardium_key_lifecycle_manager Ibm 4.1.0.1 (including) 4.1.0.1 (including)
Security_guardium_key_lifecycle_manager Ibm 4.1.1 (including) 4.1.1 (including)
Security_key_lifecycle_manager Ibm 3.0 (including) 3.0.0.4 (including)
Security_key_lifecycle_manager Ibm 3.0.1 (including) 3.0.1.5 (including)
Security_key_lifecycle_manager Ibm 4.0 (including) 4.0.0.3 (including)
Security_key_lifecycle_manager Ibm 4.1.0 (including) 4.1.0 (including)
Security_key_lifecycle_manager Ibm 4.1.0.1 (including) 4.1.0.1 (including)
Security_key_lifecycle_manager Ibm 4.1.1 (including) 4.1.1 (including)

References