IBM Security Guardium Key Lifecycle Manager 4.1.0.1
Approved changes feed: RSS · Atom
cpe:2.3:a:ibm:security_guardium_key_lifecycle_manager:4.1.0.1:*:*:*:*:*:*:*
part: a version: 4.1.0.1 update: *
| Vendor | Ibm (177c0602-9232-5933-8f2f-9d22f079d22d) |
|---|---|
| Product | Security Guardium Key Lifecycle Manager (0d5dbff8-cce1-51d7-9e41-92ffacce0b79) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-38983 |
vulnerable | 2026-06-08 05:33:48.705156 |
Details available
MEDIUM (4.4)
IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 212792.
Published: 2021-11-15T15:35:43.197Z
Updated: 2024-09-16T16:39:03.221Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-38982 |
vulnerable | 2026-06-08 05:33:48.704362 |
Details available
MEDIUM (5.4)
IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 212791.
Published: 2021-11-15T15:35:41.616Z
Updated: 2024-09-16T20:52:05.965Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-38981 |
vulnerable | 2026-06-08 05:33:48.703454 |
Details available
MEDIUM (5.3)
IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 212788.
Published: 2021-11-15T15:35:40.041Z
Updated: 2024-09-17T04:19:45.003Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-38979 |
vulnerable | 2026-06-08 05:33:48.702121 |
Details available
MEDIUM (4.4)
IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 uses a one-way cryptographic hash against an input that should not be reversible, such as a password, but the software does not also use a salt as part of the input. IBM X-Force ID: 212785.
Published: 2021-11-15T15:35:38.410Z
Updated: 2024-09-16T20:52:53.536Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-38978 |
vulnerable | 2026-06-08 05:33:48.701079 |
Details available
MEDIUM (5.9)
IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 212783.
Published: 2021-11-15T15:35:36.823Z
Updated: 2024-09-17T02:36:34.690Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-38977 |
vulnerable | 2026-06-08 05:33:48.700196 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-38976 |
vulnerable | 2026-06-08 05:33:48.699277 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-38975 |
vulnerable | 2026-06-08 05:33:48.698441 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-38974 |
vulnerable | 2026-06-08 05:33:48.695297 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.