CVE-2021-38121

Published: Aug 28, 2024Modified: Jun 17, 2026

8.8

Vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

Insufficient or weak TLS protocol version identified in Advance authentication client server communication when specific service is accessed between devices. This issue affects NetIQ Advance Authentication versions before 6.3.5.1

Affected (8)

Products: Microfocus: Netiq Advanced Authentication

Microfocus

1 product

Netiq Advanced Authentication

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Microfocus Netiq Advanced Authentication	Before 6.3
Microfocus Netiq Advanced Authentication	Version 6.3
Microfocus Netiq Advanced Authentication	Version 6.3 sp1
Microfocus Netiq Advanced Authentication	Version 6.3 sp2
Microfocus Netiq Advanced Authentication	Version 6.3 sp3
Microfocus Netiq Advanced Authentication	Version 6.3 sp4
Microfocus Netiq Advanced Authentication	Version 6.3 sp4_patch1
Microfocus Netiq Advanced Authentication	Version 6.3 sp5

Related CWEs

CWE-326

Inadequate Encryption Strength

The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.

References (1)

https://www.netiq.com/documentation/advanced-authentication-63/advanced-authentication-releasenotes-6351/data/advanced-authentication-releasenotes-6351.html

Source: security@opentext.com

Release NotesVendor Advisory

Timeline

No history available yet.