CVE-2021-38921

Reference Links

• https://exchange.xforce.ibmcloud.com/vulnerabilities/210067
• https://www.ibm.com/support/pages/node/6538418 (Advisory)

Parent vulnerabilities

(Appears in the following advisories)

• IBM-6538418

Frequently Asked Questions

• What is CVE-2021-38921?

  CVE-2021-38921 is a vulnerability in IBM Security Verify 10.0.0, 10.0.1.0, and 10.0.2.0 that uses weaker than expected cryptographic algorithms, allowing an attacker to decrypt highly sensitive information.

• What is the severity of CVE-2021-38921?

  The severity of CVE-2021-38921 is high with a CVSS score of 7.5.

• How does CVE-2021-38921 affect IBM Security Verify Access?

  CVE-2021-38921 affects IBM Security Verify Access versions 10.0.0, 10.0.1.0, and 10.0.2.0.

• How can an attacker exploit CVE-2021-38921?

  An attacker can exploit CVE-2021-38921 by using weaker cryptographic algorithms to decrypt highly sensitive information.

• Is there a fix available for CVE-2021-38921?

  Yes, IBM has provided a fix for CVE-2021-38921. Please refer to the official IBM Security Access Manager documentation for details on how to apply the fix.