NetSight
medium4.3

CVE-2021-38972

IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 receives input or data, but it does not validate or incorrectly validates that the input has the prop…

Impact

IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Affected products

VendorProductAffected versions
IbmSecurity Guardium Key Lifecycle Manager
from 4.1.0 through 4.1.0.1
Version 4.1.1
IbmSecurity Key Lifecycle Manager
from 3.0 through 3.0.0.4
from 3.0.1 through 3.0.1.5
from 4.0 through 4.0.0.3

Weakness classification

References