Medium · 6.5 CVE-2021-20474 EUVD-2021-7892GHSA-jr6g-mp22-2pf7

IBM Guardium Data Encryption (GDE) 3.0.0.2 and 4.0.0.4 does not perform any authentication for functionality that requires a provable user …

Published Jul 7, 2021 · Updated Sep 17, 2024 · Assigned by ibm

Vendor: IBM Product: Guardium Data Encryption

Description

IBM Guardium Data Encryption (GDE) 3.0.0.2 and 4.0.0.4 does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

Affected products

Vendor	Product	Affected	Fixed
IBM	Guardium Data Encryption	3.0.0.2, 4.0.0.4	—

References

https://www.ibm.com/support/pages/node/6469407
ibm-gde-cve202120474-missing-auth (196945) vdb-entry