Data Encoding Flaw in IBM Guardium Data Encryption Software
CVE-2021-39027

3LOW

Key Information:

Vendor
IBM
Status
Guardium Data Encryption
Vendor
CVE Published:
6 May 2022

Summary

IBM Guardium Data Encryption versions 4.0.0 and 5.0.0 contain a vulnerability where the preparation of structured messages for component communication lacks proper data encoding or escaping. This oversight compromises the integrity of the message structure, potentially allowing unintended modifications or misinterpretations during data transmission.

Affected Version(s)

Guardium Data Encryption 4.0.0

Guardium Data Encryption 5.0.0

References

https://www.ibm.com/support/pages/node/6582499
x_refsource_CONFIRM
https://exchange.xforce.ibmcloud.com/vulnerabilities/213865
vdb-entryx_refsource_XF

CVSS V3.1

Score:
3
Severity:
LOW
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.