Security Advisory

CVE-2021-38979

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-11-15 15:35:38
Last updated 2024-09-16 20:52:53
Assigner ibm
State PUBLISHED

Description

IBM Tivoli Key Lifecycle Manager 3.0, 3.0.1, 4.0, and 4.1 uses a one-way cryptographic hash against an input that should not be reversible, such as a password, but the software does not also use a salt as part of the input. IBM X-Force ID: 212785.