CVE-2021-39023

published 2022-05-06

CVE-2021-39023: IBM Guardium Data Encryption (GDE) 4.0.0 and 5.0.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is…

high 7.5 CVSS 3.1

AV N AC L PR N UI N S U C H I N A N

IBM Guardium Data Encryption (GDE) 4.0.0 and 5.0.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 213860.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
ibm	guardium_data_encryption	—	—
ibm	guardium_data_encryption	—	—
ibm	guardium_data_encryption	—	—
ibm	guardium_data_encryption	—	—
ibm	guardium_data_encryption	—	—

CWE-209