CVE-2021-38980

Published: Nov 23, 2021Modified: Jun 17, 2026

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitability: 3.9 / Impact: 1.4

Source: NVD

Description

IBM Tivoli Key Lifecycle Manager (IBM Security Guardium Key Lifecycle Manager) 3.0, 3.0.1, 4.0, and 4.1 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 212786.

Affected (5)

Products: Ibm: Security Guardium Key Lifecycle Manager, Security Key Lifecycle Manager

Ibm

2 products

Security Guardium Key Lifecycle Manager

Security Key Lifecycle Manager

Configuration A

5 vulnerable · 3 platform

Vulnerable Software	Affected Versions
Ibm Security Guardium Key Lifecycle Manager	From 4.1.0 to 4.1.0.1
Ibm Security Guardium Key Lifecycle Manager	Version 4.1.1
Ibm Security Key Lifecycle Manager	From 3.0 to 3.0.0.4
Ibm Security Key Lifecycle Manager	From 3.0.1 to 3.0.1.5
Ibm Security Key Lifecycle Manager	From 4.0 to 4.0.0.3