CVE-2021-29838: Infoleak
IBM Security Guardium Insights 3.0 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques.
Other sources
IBM Security Guardium Insights could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques.
— IBM
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2021-29838?
CVE-2021-29838 is a vulnerability in IBM Security Guardium Insights 3.0 that could allow a remote attacker to obtain sensitive information.
How does CVE-2021-29838 work?
CVE-2021-29838 is caused by the failure to properly enable HTTP Strict Transport Security, which allows an attacker to obtain sensitive information using man-in-the-middle techniques.
What can an attacker do if they exploit CVE-2021-29838?
By exploiting CVE-2021-29838, an attacker can obtain sensitive information from the affected IBM Security Guardium Insights instances.
What is the severity of CVE-2021-29838?
CVE-2021-29838 has a severity rating of 5.9 (medium).
How do I fix CVE-2021-29838?
To fix CVE-2021-29838, it is recommended to apply the patch provided by IBM Security Guardium Insights or update to a version of the software that includes the fix.