CVE-2021-38980: Medium severity ibm security guardium key lifecycle manager vulnerability
IBM Tivoli Key Lifecycle Manager (IBM Security Guardium Key Lifecycle Manager) 3.0, 3.0.1, 4.0, and 4.1 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 212786.
Other sources
IBM Tivoli Key Lifecycle Manager could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system.
— IBM
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2021-38980?
CVE-2021-38980 is a vulnerability in IBM Tivoli Key Lifecycle Manager (IBM Security Guardium Key Lifecycle Manager) that allows a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser.
Which versions of IBM Tivoli Key Lifecycle Manager are affected by CVE-2021-38980?
IBM Tivoli Key Lifecycle Manager (IBM Security Guardium Key Lifecycle Manager) versions 3.0, 3.0.1, 4.0, and 4.1 are affected by CVE-2021-38980.
What is the severity of CVE-2021-38980?
CVE-2021-38980 has a severity rating of 5.3 (Medium).
How can a remote attacker exploit CVE-2021-38980?
A remote attacker can exploit CVE-2021-38980 by making a request to the vulnerable system and analyzing the detailed technical error message returned in the browser to obtain sensitive information.
Are IBM AIX, Linux kernel, and Microsoft Windows affected by CVE-2021-38980?
No, IBM AIX, Linux kernel, and Microsoft Windows are not affected by CVE-2021-38980.