CVE-2021-39027
Assigner: ibm
Published: 2022-05-05T00:00:00
State: PUBLISHED
affected: product: Guardium Data Encryption
vendor: IBM
versions: status: affected
version: 4.0.0
status: affected
version: 5.0.0
datePublic: 2022-05-05T00:00:00
descriptions: value: IBM Guardium Data Encryption (GDE) 4.0.0 and 5.0.0 prepares a structured message for communication with another component, but encoding or escaping of the data is either missing or done incorrectly. As a result, the intended structure of the message is not preserved. IBM X-Force ID: 213865.
metrics: cvssV3_0: attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 3
baseSeverity: LOW
confidentialityImpact: NONE
exploitCodeMaturity: UNPROVEN
integrityImpact: LOW
privilegesRequired: LOW
remediationLevel: OFFICIAL_FIX
reportConfidence: CONFIRMED
scope: CHANGED
temporalScore: 2.6
temporalSeverity: LOW
userInteraction: REQUIRED
vectorString: CVSS:3.0/C:N/S:C/I:L/AC:H/UI:R/AV:N/A:N/PR:L/RL:O/RC:C/E:U
version: 3.0
problemTypes: descriptions: description: Bypass Security
type: text