cbcvebase.
CVE-2021-38981
published 2021-11-15

CVE-2021-38981: IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 could allow a remote attacker to obtain sensitive information when a detailed technical error message…

medium5.3CVSS 3.1
AVNACLPRNUINSUCLINAN
IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 212788.

Affected

16 ranges
VendorProductVersion rangeFixed in
ibmsecurity_guardium_key_lifecycle_manager
ibmsecurity_guardium_key_lifecycle_manager
ibmsecurity_guardium_key_lifecycle_manager
ibmsecurity_key_lifecycle_manager
ibmsecurity_key_lifecycle_manager
ibmsecurity_key_lifecycle_manager
ibmsecurity_key_lifecycle_manager
ibmsecurity_key_lifecycle_manager
ibmsecurity_key_lifecycle_manager
ibmsecurity_key_lifecycle_manager
ibmsecurity_key_lifecycle_manager
ibmsecurity_key_lifecycle_manager
ibmsecurity_key_lifecycle_manager
ibmsecurity_key_lifecycle_manager3.0 – 3.0.0.4
ibmsecurity_key_lifecycle_manager3.0.1 – 3.0.1.5
ibmsecurity_key_lifecycle_manager4.0 – 4.0.0.3