CVE-2021-39022 MEDIUM

CVE-2021-39022

Vendor Ibm
Product Security Guardium Data Encryption
Published March 10, 2022
Last update September 16, 2024
View on NVD All CVEs

CVSS base score

6.2/10
Attack vector Network
Attack complexity High
Privileges required High
User interaction Required
Confidentiality High
Integrity Low

CVSS vector

CVSS:3.0/A:N/I:L/AC:H/UI:R/S:C/C:H/PR:H/AV:N/E:U/RL:O/RC:C

What the vulnerability does

01Description

IBM Guardium Data Encryption (GDE) 4.0.0.0 and 5.0.0.0 saves user-provided information into a Comma-Separated Value (CSV) file, but it does not neutralize or incorrectly neutralizes special elements that could be interpreted as a command when the file is opened by spreadsheet software. IBM X-Force ID: 213858.

Key dates

02Disclosure timeline

March 10, 2022 CVE published
September 16, 2024 Record updated