CVE-2021-38971: Medium severity IBM Data Virtualization on Cloud Pak for Data vulnerability
IBM Data Virtualization on Cloud Pak for Data 1.3.0, 1.4.1, 1.5.0, 1.7.1 and 1.7.3 could allow an authorized user to bypass data masking rules and obtain sensitve information. IBM X-Force ID: 212620.
Other sources
IBM Data Virtualization on Cloud Pak for Data could allow an authorized user to bypass data masking rules and obtain sensitve information.
— IBM
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-38971?
CVE-2021-38971 is classified as a medium severity vulnerability.
How do I fix CVE-2021-38971?
To remediate CVE-2021-38971, update IBM Data Virtualization on Cloud Pak for Data to a version that is not affected by this vulnerability.
Who is affected by CVE-2021-38971?
Users of IBM Data Virtualization on Cloud Pak for Data versions 1.3.0, 1.4.1, 1.5.0, 1.7.1, and 1.7.3 are at risk of CVE-2021-38971.
What type of vulnerability is CVE-2021-38971?
CVE-2021-38971 is a data exposure vulnerability that allows for unauthorized bypassing of data masking rules.
Can CVE-2021-38971 affect authorized users?
Yes, CVE-2021-38971 can allow authorized users to bypass data masking and access sensitive information.