CVEvulnerability

CVE-2021-38972

4.3 MEDIUM Published 2021-11-12 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-11-12
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
CVSS 3.0 ([email protected])
4.3 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
CVSS 2.0 ([email protected])
4.0 MEDIUM — AV:N/AC:L/Au:S/C:N/I:P/A:N
Weaknesses
CWE-20

Description

IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Affected configurations

• ibm security guardium key lifecycle manager (>= 4.1.0 <= 4.1.0.1) • ibm security guardium key lifecycle manager 4.1.1 • ibm security key lifecycle manager (>= 3.0 <= 3.0.0.4) • ibm security key lifecycle manager (>= 3.0.1 <= 3.0.1.5) • ibm security key lifecycle manager (>= 4.0 <= 4.0.0.3)

Related

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References