8.3
High
CVE-2021-38121 Insufficient or weak TLS protocol version identified in Advance authentication client server communication when specific…
Description
Insufficient or weak TLS protocol version identified in Advance authentication client server communication when specific service is accessed between devices. This issue affects NetIQ Advance Authentication versions before 6.3.5.1
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| NetIQ Advance Authentication 6.3 | 6.3.5.1 → latest | No fix stated |
| netiq_advanced_authentication 6.3 | earliest → < 6.3.5.1 | 6.3.5.1 |
Other CVEs of NetIQ Advance Authentication
The 6 CVEs of NetIQ Advance Authentication →
CVE-2021-22509
A vulnerability identified in storing and reusing information in Advance Authentication
8.1
High
CVE-2021-22529
A vulnerability identified in NetIQ Advance Authentication that leaks sensitive server information
6.3
Medium
CVE-2021-22530
A vulnerability identified in NetIQ Advance Authentication that doesn't enforce account lockout when brute force…
8.2
High
CVE-2021-38120
A vulnerability identified in Advance Authentication that allows bash command Injection in administrative controlled…
5.1
Medium