CVE-2021-20378

HIGH

IBM Guardium Data Encryption <4.0.0.4 - Privilege Escalation

Title source: llm

Description

IBM Guardium Data Encryption (GDE) 3.0.0.2 and 4.0.0.4 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 195709.

References (2)

Core 2

Core References

Patch, Vendor Advisory x_refsource_confirm

https://www.ibm.com/support/pages/node/6469407

VDB Entry, Vendor Advisory vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/195709

Scores

CVSS v3 8.8

EPSS 0.0043

EPSS Percentile 34.3%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-613

Status published

Products (2)

ibm/guardium_data_encryption 3.0.0.2

ibm/guardium_data_encryption 4.0.0.4

Published Jul 07, 2021

Tracked Since Feb 18, 2026