CVE-2021-38984

Published: Nov 15, 2021Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 212793.

Affected (5)

Products: Ibm: Security Guardium Key Lifecycle Manager, Security Key Lifecycle Manager

Ibm

2 products

Security Guardium Key Lifecycle Manager

Security Key Lifecycle Manager

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Ibm Security Guardium Key Lifecycle Manager	From 4.1.0 to 4.1.0.1
Ibm Security Guardium Key Lifecycle Manager	Version 4.1.1
Ibm Security Key Lifecycle Manager	From 3.0 to 3.0.0.4
Ibm Security Key Lifecycle Manager	From 3.0.1 to 3.0.1.5
Ibm Security Key Lifecycle Manager	From 4.0 to 4.0.0.3