CVE-2021-20415: High severity ibm security guardium data encryption vulnerability
Published Jul 7, 2021
·Updated
IBM Guardium Data Encryption (GDE) 4.0.0.4 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 196217.
Affected Software
1 affected component
IBM Guardium Data Encryption=4.0.0.4
Remediation
Patch Available
Event History
Jul 7, 2021
CVE Published
via MITRE·04:30 PM
Data Sourced
via MITRE·04:30 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this IBM Guardium Data Encryption vulnerability?
The vulnerability ID is CVE-2021-20415.
2
What is the severity of CVE-2021-20415?
The severity of CVE-2021-20415 is high with a score of 7.5.
3
How does IBM Guardium Data Encryption (GDE) 4.0.0.4 handle account lockout?
IBM Guardium Data Encryption (GDE) 4.0.0.4 uses an inadequate account lockout setting.
4
What could a remote attacker do with this vulnerability?
A remote attacker could exploit this vulnerability to brute force account credentials.
5
Are there any references for CVE-2021-20415?
Yes, you can find references for CVE-2021-20415 at the following links: [Link 1](https://exchange.xforce.ibmcloud.com/vulnerabilities/196217) and [Link 2](https://www.ibm.com/support/pages/node/6469691).