← Database

CVE-2021-38979

HIGH CVSS: 7.5 Published: 2021-11-15 Modified: 2026-06-17

Description

IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 uses a one-way cryptographic hash against an input that should not be reversible, such as a password, but the software does not also use a salt as part of the input. IBM X-Force ID: 212785.

Affected Platforms

Microsoft WindowsIbm Security Key Lifecycle ManagerIbm AixIbm Security Guardium Key Lifecycle ManagerLinux Linux Kernel

Weakness Type

CWE-916

References