CVE-2021-38980

Name of the Vulnerable Software and Affected Versions IBM Tivoli Key Lifecycle Manager (IBM Security Guardium Key Lifecycle Manager) versions 3.0 through 4.1

Description A remote attacker could obtain sensitive information when a detailed technical error message is returned in the browser, potentially using this information for further attacks against the system.

Recommendations For versions 3.0 through 4.1, consider restricting access to detailed technical error messages to minimize the risk of exploitation. As a temporary workaround, limit the information returned in browser error messages until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.