← Retour aux CVEs
CVE-2021-39026
MEDIUM5.9
Description
IBM Guardium Data Encryption (GDE) 5.0.0.2 and 5.0.0.3 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 213964.
Details CVE
Score CVSS v3.15.9
SeveriteMEDIUM
Vecteur CVSSCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Vecteur d'attaqueNETWORK
ComplexiteHIGH
Privileges requisNONE
Interaction utilisateurNONE
Publie2/18/2022
Derniere modification11/21/2024
Sourcenvd
Observations honeypot0
Produits affectes
ibm:guardium_data_encryption
Faiblesses (CWE)
CWE-319
References
https://exchange.xforce.ibmcloud.com/vulnerabilities/213864(psirt@us.ibm.com)
https://www.ibm.com/support/pages/node/6557184(psirt@us.ibm.com)
https://exchange.xforce.ibmcloud.com/vulnerabilities/213864(af854a3a-2127-422b-91ae-364da2661108)
https://www.ibm.com/support/pages/node/6557184(af854a3a-2127-422b-91ae-364da2661108)
Correlations IOC
Aucune correlation enregistree
This product uses data from the NVD API but is not endorsed or certified by the NVD.