First published: Mon Mar 08 2021(Updated: )
IBM Guardium Data Encryption (GDE) 4.0.0.4 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 196212.
Credit: psirt@us.ibm.com
Affected Software | Affected Version | How to fix |
---|---|---|
IBM GDE | <=4.0.0.4 | |
IBM Guardium Data Encryption | =4.0.0.4 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2021-20413 is a vulnerability in IBM Guardium Data Encryption (GDE) 4.0.0.4 that allows a remote attacker to obtain sensitive information.
CVE-2021-20413 allows a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser, which could be used for further attacks against the system.
The severity of CVE-2021-20413 is medium with a CVSS base score of 4.3.
To fix the CVE-2021-20413 vulnerability in IBM Guardium Data Encryption (GDE), you should apply the necessary patch or upgrade to a version that is not affected by the vulnerability.
You can find more information about CVE-2021-20413 on the IBM X-Force Exchange website (https://exchange.xforce.ibmcloud.com/vulnerabilities/196212) and the IBM Support website (https://www.ibm.com/support/pages/node/6444037).