CVE-2021-38972
Assigner: ibm
Published: 2021-11-11T00:00:00
State: PUBLISHED
affected: product: Security Key Lifecycle Manager
vendor: IBM
versions: status: affected
version: 3.0
status: affected
version: 3.0.1
status: affected
version: 4.0
status: affected
version: 3.0.0.4
status: affected
version: 3.0.1.5
status: affected
version: 4.0.0.3
status: affected
version: 4.1.0.1
status: affected
version: 4.1.1
status: affected
version: 4.1.0
datePublic: 2021-11-11T00:00:00
descriptions: value: IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
metrics: cvssV3_0: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 4.3
baseSeverity: MEDIUM
confidentialityImpact: NONE
exploitCodeMaturity: UNPROVEN
integrityImpact: LOW
privilegesRequired: LOW
remediationLevel: OFFICIAL_FIX
reportConfidence: CONFIRMED
scope: UNCHANGED
temporalScore: 3.8
temporalSeverity: LOW
userInteraction: NONE
vectorString: CVSS:3.0/A:N/AV:N/UI:N/C:N/S:U/AC:L/I:L/PR:L/E:U/RC:C/RL:O
version: 3.0
problemTypes: descriptions: description: Gain Access
type: text