CVE-2021-39027

published 2022-05-06

CVE-2021-39027: IBM Guardium Data Encryption (GDE) 4.0.0 and 5.0.0 prepares a structured message for communication with another component, but encoding or escaping of the data…

medium 5 CVSS 3.1

AV N AC L PR L UI N S C C N I L A N

IBM Guardium Data Encryption (GDE) 4.0.0 and 5.0.0 prepares a structured message for communication with another component, but encoding or escaping of the data is either missing or done incorrectly. As a result, the intended structure of the message is not preserved. IBM X-Force ID: 213865.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
ibm	guardium_data_encryption	—	—
ibm	guardium_data_encryption	—	—
ibm	guardium_data_encryption	—	—
ibm	guardium_data_encryption	—	—

CWE-116