mirror of
https://github.com/CVEProject/cvelist.git
synced 2025-07-29 05:56:59 +00:00
115 lines
3.4 KiB
JSON
115 lines
3.4 KiB
JSON
{
|
|
"impact" : {
|
|
"cvssv3" : {
|
|
"BM" : {
|
|
"SCORE" : "2.400",
|
|
"UI" : "R",
|
|
"AV" : "N",
|
|
"A" : "N",
|
|
"C" : "N",
|
|
"S" : "U",
|
|
"I" : "L",
|
|
"AC" : "L",
|
|
"PR" : "H"
|
|
},
|
|
"TM" : {
|
|
"RL" : "O",
|
|
"RC" : "C",
|
|
"E" : "U"
|
|
}
|
|
}
|
|
},
|
|
"data_version" : "4.0",
|
|
"affects" : {
|
|
"vendor" : {
|
|
"vendor_data" : [
|
|
{
|
|
"vendor_name" : "IBM",
|
|
"product" : {
|
|
"product_data" : [
|
|
{
|
|
"product_name" : "Security Key Lifecycle Manager",
|
|
"version" : {
|
|
"version_data" : [
|
|
{
|
|
"version_value" : "3.0"
|
|
},
|
|
{
|
|
"version_value" : "3.0.1"
|
|
},
|
|
{
|
|
"version_value" : "4.0"
|
|
},
|
|
{
|
|
"version_value" : "3.0.0.4"
|
|
},
|
|
{
|
|
"version_value" : "3.0.1.5"
|
|
},
|
|
{
|
|
"version_value" : "4.0.0.3"
|
|
},
|
|
{
|
|
"version_value" : "4.1.0.1"
|
|
},
|
|
{
|
|
"version_value" : "4.1.1"
|
|
},
|
|
{
|
|
"version_value" : "4.1.0"
|
|
}
|
|
]
|
|
}
|
|
}
|
|
]
|
|
}
|
|
}
|
|
]
|
|
}
|
|
},
|
|
"CVE_data_meta" : {
|
|
"STATE" : "PUBLIC",
|
|
"ASSIGNER" : "psirt@us.ibm.com",
|
|
"DATE_PUBLIC" : "2021-11-11T00:00:00",
|
|
"ID" : "CVE-2021-38973"
|
|
},
|
|
"data_type" : "CVE",
|
|
"data_format" : "MITRE",
|
|
"problemtype" : {
|
|
"problemtype_data" : [
|
|
{
|
|
"description" : [
|
|
{
|
|
"lang" : "eng",
|
|
"value" : "Gain Access"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
"description" : {
|
|
"description_data" : [
|
|
{
|
|
"value" : "IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.",
|
|
"lang" : "eng"
|
|
}
|
|
]
|
|
},
|
|
"references" : {
|
|
"reference_data" : [
|
|
{
|
|
"name" : "https://www.ibm.com/support/pages/node/6515528",
|
|
"title" : "IBM Security Bulletin 6515528 (Security Key Lifecycle Manager)",
|
|
"url" : "https://www.ibm.com/support/pages/node/6515528",
|
|
"refsource" : "CONFIRM"
|
|
},
|
|
{
|
|
"refsource" : "XF",
|
|
"title" : "X-Force Vulnerability Report",
|
|
"name" : "ibm-tivoli-cve202138973-input-validation (212778)",
|
|
"url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/212778"
|
|
}
|
|
]
|
|
}
|
|
}
|