CVE-2021-38973 LOW

CVE-2021-38973

Vendor Ibm
Product Security Key Lifecycle Manager
Published November 12, 2021
Last update September 17, 2024
View on NVD All CVEs

CVSS base score

2.4/10
Attack vector Network
Attack complexity Low
Privileges required High
User interaction Required
Confidentiality None
Integrity Low

CVSS vector

CVSS:3.0/UI:R/AV:N/A:N/C:N/S:U/I:L/AC:L/PR:H/RL:O/RC:C/E:U

What the vulnerability does

01Description

IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Key dates

02Disclosure timeline

November 12, 2021 CVE published
September 17, 2024 Record updated