PT-2022-10824 · Ibm · Ibm Data Virtualization On Cloud Pak For Data

Published 2022-03-14 · Updated 2022-07-12 · CVE-2021-38971

Positive Technologies (AI Summary)

CVSS v3.1

4.9

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Data Virtualization on Cloud Pak for Data versions 1.3.0, 1.4.1, 1.5.0, 1.7.1, 1.7.3

Description The issue allows an authorized user to bypass data masking rules and obtain sensitive information.

Recommendations For versions 1.3.0, 1.4.1, 1.5.0, 1.7.1, 1.7.3, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Related Identifiers

CVE-2021-38971

Affected Products

Ibm Data Virtualization On Cloud Pak For Data

References · 5

• https://exchange.xforce.ibmcloud.com/vulnerabilities/212620 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-38971 · Security Note
• https://osv.dev/vulnerability/CVE-2021-38971 · Vendor Advisory
• https://ibm.com/support/pages/node/6551076 · Vendor Advisory
• https://t.me/cibsecurity/38891 · Telegram Post