Skip to content
Sign in
3.7 Low

CVE-2021-39021 IBM Guardium Data Encryption (GDE) 5.0.0.2 behaves differently or sends different responses under different…

Description

IBM Guardium Data Encryption (GDE) 5.0.0.2 behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor, which could facilitate username enumeration. IBM X-Force ID: 213856.

Affected products and versions

Product Affected versions Fixed in
Security Guardium Data Encryption 5.0.0.2 No fix stated

Other CVEs of Security Guardium Data Encryption

The 20 CVEs of Security Guardium Data Encryption →
CVE-2021-39025 IBM Guardium Data Encryption (GDE) 4.0.0.0 and 5.0.0.0 could disclose internal IP address information when the web… 5.3 Medium CVE-2021-39022 IBM Guardium Data Encryption (GDE) 4.0.0.0 and 5.0.0.0 saves user-provided information into a Comma-Separated Value… 6.2 Medium CVE-2021-39026 IBM Guardium Data Encryption (GDE) 5.0.0.2 and 5.0.0.3 could allow a remote attacker to obtain sensitive information,… 5.9 Medium CVE-2019-4687 IBM Security Guardium Data Encryption (GDE) 3.0.0.2 stores sensitive information in URL parameters 3.7 Low
Track this CVE