CVE-2021-38974

Published: Nov 15, 2021Modified: Jun 17, 2026

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 could allow an authenticated user to cause a denial of service using specially crafted HTTP requests. IBM X-Force ID: 212779.

Affected (9)

Products: Ibm: Security Guardium Key Lifecycle Manager, Security Key Lifecycle Manager

Ibm

2 products

Security Guardium Key Lifecycle Manager

Security Key Lifecycle Manager

Configuration A

9 vulnerable · 3 platform

Vulnerable Software	Affected Versions
Ibm Security Guardium Key Lifecycle Manager	Version 4.1.0.1
Ibm Security Guardium Key Lifecycle Manager	Version 4.1.0
Ibm Security Guardium Key Lifecycle Manager	Version 4.1.1
Ibm Security Key Lifecycle Manager	From 3.0 to 3.0.0.4
Ibm Security Key Lifecycle Manager	From 3.0.1 to 3.0.1.5
Ibm Security Key Lifecycle Manager	From 4.0 to 4.0.0.3
Ibm Security Key Lifecycle Manager	Version 4.1.0.1
Ibm Security Key Lifecycle Manager	Version 4.1.0
Ibm Security Key Lifecycle Manager	Version 4.1.1

Running on/with	Platform Versions
Ibm Aix	All versions
Linux Linux Kernel	All versions
Microsoft Windows	All versions

References (4)

https://exchange.xforce.ibmcloud.com/vulnerabilities/212779

Source: psirt@us.ibm.com

VDB EntryVendor Advisory

https://www.ibm.com/support/pages/node/6516046

Source: psirt@us.ibm.com

PatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/212779

Source: af854a3a-2127-422b-91ae-364da2661108

VDB EntryVendor Advisory

https://www.ibm.com/support/pages/node/6516046

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.