CVE-2021-39021

CWE-2033 documents3 sources
Severity
5.3MEDIUM
EPSS
0.1%
top 74.96%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
IBM Security Guardium Data EncryptionIBM Guardium Data Encryption
Timeline
PublishedFeb 2
Latest updateFeb 4

Description

IBM Guardium Data Encryption (GDE) 5.0.0.2 behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor, which could facilitate username enumeration. IBM X-Force ID: 213856.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NExploitability: 3.9 | Impact: 1.4

Affected Packages2 packages

🔴Vulnerability Details

2
CVEList
CVE-2021-39021: IBM Guardium Data Encryption (GDE) 5↗2022-02-04
▶
GHSA
GHSA-7422-72hc-mqgf: IBM Guardium Data Encryption (GDE) 5↗2022-02-03
▶
CVE-2021-39021 (MEDIUM CVSS 5.3) | IBM Guardium Data Encryption (GDE) | cvebase.io