cbcvebase.
CVE-2021-38975
published 2021-11-15

CVE-2021-38975: IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 could allow an authenticated user to to obtain sensitive information from a specially crafted HTTP…

medium6.5CVSS 3.1
AVNACLPRLUINSUCHINAN
IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 could allow an authenticated user to to obtain sensitive information from a specially crafted HTTP request. IBM X-Force ID: 212780.

Affected

16 ranges
VendorProductVersion rangeFixed in
ibmsecurity_guardium_key_lifecycle_manager
ibmsecurity_guardium_key_lifecycle_manager
ibmsecurity_guardium_key_lifecycle_manager
ibmsecurity_key_lifecycle_manager
ibmsecurity_key_lifecycle_manager
ibmsecurity_key_lifecycle_manager
ibmsecurity_key_lifecycle_manager
ibmsecurity_key_lifecycle_manager
ibmsecurity_key_lifecycle_manager
ibmsecurity_key_lifecycle_manager
ibmsecurity_key_lifecycle_manager
ibmsecurity_key_lifecycle_manager
ibmsecurity_key_lifecycle_manager
ibmsecurity_key_lifecycle_manager3.0 – 3.0.0.4
ibmsecurity_key_lifecycle_manager3.0.1 – 3.0.1.5
ibmsecurity_key_lifecycle_manager4.0 – 4.0.0.3