CVE Vulnerabilities

CVE-2021-38975

Published: Nov 15, 2021 | Modified: Jun 28, 2022
CVSS 3.x
6.5
MEDIUM
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS 2.x
4 MEDIUM
AV:N/AC:L/Au:S/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu

IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 could allow an authenticated user to to obtain sensitive information from a specially crafted HTTP request. IBM X-Force ID: 212780.

Affected Software

Name Vendor Start Version End Version
Security_guardium_key_lifecycle_manager Ibm 4.1.0 (including) 4.1.0 (including)
Security_guardium_key_lifecycle_manager Ibm 4.1.0.1 (including) 4.1.0.1 (including)
Security_guardium_key_lifecycle_manager Ibm 4.1.1 (including) 4.1.1 (including)
Security_key_lifecycle_manager Ibm 3.0 (including) 3.0.0.4 (including)
Security_key_lifecycle_manager Ibm 3.0.1 (including) 3.0.1.5 (including)
Security_key_lifecycle_manager Ibm 4.0 (including) 4.0.0.3 (including)
Security_key_lifecycle_manager Ibm 4.1.0 (including) 4.1.0 (including)
Security_key_lifecycle_manager Ibm 4.1.0.1 (including) 4.1.0.1 (including)
Security_key_lifecycle_manager Ibm 4.1.1 (including) 4.1.1 (including)

References