CVE-2021-38975

Published: Nov 15, 2021Modified: Jun 17, 2026

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 could allow an authenticated user to to obtain sensitive information from a specially crafted HTTP request. IBM X-Force ID: 212780.

Affected (9)

Products: Ibm: Security Guardium Key Lifecycle Manager, Security Key Lifecycle Manager

Ibm

2 products

Security Guardium Key Lifecycle Manager

Security Key Lifecycle Manager

Configuration A

9 vulnerable · 3 platform

Vulnerable Software	Affected Versions
Ibm Security Guardium Key Lifecycle Manager	Version 4.1.0.1
Ibm Security Guardium Key Lifecycle Manager	Version 4.1.0
Ibm Security Guardium Key Lifecycle Manager	Version 4.1.1
Ibm Security Key Lifecycle Manager	3.0 ≤ version ≤ 3.0.0.4
Ibm Security Key Lifecycle Manager	3.0.1 ≤ version ≤ 3.0.1.5
Ibm Security Key Lifecycle Manager	4.0 ≤ version ≤ 4.0.0.3
Ibm Security Key Lifecycle Manager	Version 4.1.0.1
Ibm Security Key Lifecycle Manager	Version 4.1.0
Ibm Security Key Lifecycle Manager	Version 4.1.1

Running on/with	Platform Versions
Ibm Aix	All versions
Linux Linux Kernel	All versions
Microsoft Windows	All versions

References (4)

https://exchange.xforce.ibmcloud.com/vulnerabilities/212780

Source: psirt@us.ibm.com

VDB EntryVendor Advisory

https://www.ibm.com/support/pages/node/6516044

Source: psirt@us.ibm.com

PatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/212780

Source: af854a3a-2127-422b-91ae-364da2661108

VDB EntryVendor Advisory

https://www.ibm.com/support/pages/node/6516044

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.