Username Enumeration Vulnerability in IBM Guardium Data Encryption
CVE-2021-39021

3.7LOW

Key Information:

Vendor
IBM
Status
Security Guardium Data Encryption
Vendor
CVE Published:
2 February 2022

Summary

IBM Guardium Data Encryption version 5.0.0.2 is susceptible to a vulnerability that allows an unauthorized actor to observe different responses under varying circumstances. This behavior could potentially enable the enumeration of valid usernames, posing a risk to data security and user privacy. Organizations utilizing this product are advised to evaluate their exposure and implement the necessary security measures.

Affected Version(s)

Security Guardium Data Encryption 5.0.0.2

References

https://www.ibm.com/support/pages/node/6552552
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/213856
vdb-entryx_refsource_XF

CVSS V3.1

Score:
3.7
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.