Vulnerability Description
IBM Data Virtualization on Cloud Pak for Data 1.3.0, 1.4.1, 1.5.0, 1.7.1 and 1.7.3 could allow an authorized user to bypass data masking rules and obtain sensitve information. IBM X-Force ID: 212620.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Data Virtualization On Cloud Pak For Data | >= 1.7.1, <= 1.7.3 |
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/212620VDB EntryVendor Advisory
- https://www.ibm.com/support/pages/node/6551076Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/212620VDB EntryVendor Advisory
- https://www.ibm.com/support/pages/node/6551076Vendor Advisory
FAQ
What is CVE-2021-38971?
CVE-2021-38971 is a vulnerability with a CVSS score of 4.9 (MEDIUM). IBM Data Virtualization on Cloud Pak for Data 1.3.0, 1.4.1, 1.5.0, 1.7.1 and 1.7.3 could allow an authorized user to bypass data masking rules and obtain sensitve information. IBM X-Force ID: 212620.
How severe is CVE-2021-38971?
CVE-2021-38971 has been rated MEDIUM with a CVSS base score of 4.9/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-38971?
Check the references section above for vendor advisories and patch information. Affected products include: Ibm Data Virtualization On Cloud Pak For Data.