CVE-2021-39020

MEDIUM 5.3CVE-2021-39020 · Published 05/05/2022 · updated 17/06/2026

In short

CVE-2021-39020 is a MEDIUM (CVSS 5.3) vulnerability affecting guardium data encryption (ibm).
Chance of exploitation in the next 30 days (EPSS): 0.50%, higher than 43.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
guardium data encryption ibm	`≤ 4.0.0.7`	No fix yet

Description

IBM Guardium Data Encryption (GDE) 4.0.0.7 and lower stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 213855.

References

exchange.xforce.ibmcloud.com/vulnerabilities/213855 · VDB Entry
ibm.com/support/pages/node/6579773 · Patch

More vulnerabilities in guardium data encryption

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

guardium data encryption

ibm

≤ 4.0.0.7

No fix yet

More vulnerabilities in guardium data encryption

See all →