CVE-2021-38973

Published: Nov 12, 2021Modified: Jun 17, 2026

2.7

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N

Exploitability: 1.2 / Impact: 1.4

Source: NVD

Description

IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Affected (5)

Products: Ibm: Security Guardium Key Lifecycle Manager, Security Key Lifecycle Manager

Ibm

2 products

Security Guardium Key Lifecycle Manager

Security Key Lifecycle Manager

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Ibm Security Guardium Key Lifecycle Manager	From 4.1.0 to 4.1.0.1
Ibm Security Guardium Key Lifecycle Manager	Version 4.1.1
Ibm Security Key Lifecycle Manager	From 3.0 to 3.0.0.4
Ibm Security Key Lifecycle Manager	From 3.0.1 to 3.0.1.5
Ibm Security Key Lifecycle Manager	From 4.0 to 4.0.0.3