CVE-2021-38121

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2021-38121
Insufficient or weak TLS protocol version identified in Advance authentication client server communication when specific service is accessed between devices.  This issue affects NetIQ Advance Authentication versions before 6.3.5.1

8.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 5.9

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://www.netiq.com/documentation/advanced-authentication-63/advanced-authentication-releasenotes-6351/data/advanced-authentication-releasenotes-6351.html Release Notes Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:microfocus:netiq_advanced_authentication:*:*:*:*:*:*:*:*
cpe:2.3:a:microfocus:netiq_advanced_authentication:6.3:-:*:*:*:*:*:*
cpe:2.3:a:microfocus:netiq_advanced_authentication:6.3:sp1:*:*:*:*:*:*
cpe:2.3:a:microfocus:netiq_advanced_authentication:6.3:sp2:*:*:*:*:*:*
cpe:2.3:a:microfocus:netiq_advanced_authentication:6.3:sp3:*:*:*:*:*:*
cpe:2.3:a:microfocus:netiq_advanced_authentication:6.3:sp4:*:*:*:*:*:*
cpe:2.3:a:microfocus:netiq_advanced_authentication:6.3:sp4_patch1:*:*:*:*:*:*
cpe:2.3:a:microfocus:netiq_advanced_authentication:6.3:sp5:*:*:*:*:*:*
History

13 Sep 2024, 18:04

Type Values Removed Values Added
First Time Microfocus
Microfocus netiq Advanced Authentication
CPE cpe:2.3:a:opentext:netiq_advance_authentication:*:*:*:*:*:*:*:* cpe:2.3:a:microfocus:netiq_advanced_authentication:*:*:*:*:*:*:*:*
cpe:2.3:a:microfocus:netiq_advanced_authentication:6.3:-:*:*:*:*:*:*
cpe:2.3:a:microfocus:netiq_advanced_authentication:6.3:sp3:*:*:*:*:*:*
cpe:2.3:a:microfocus:netiq_advanced_authentication:6.3:sp2:*:*:*:*:*:*
cpe:2.3:a:microfocus:netiq_advanced_authentication:6.3:sp4_patch1:*:*:*:*:*:*
cpe:2.3:a:microfocus:netiq_advanced_authentication:6.3:sp4:*:*:*:*:*:*
cpe:2.3:a:microfocus:netiq_advanced_authentication:6.3:sp5:*:*:*:*:*:*
cpe:2.3:a:microfocus:netiq_advanced_authentication:6.3:sp1:*:*:*:*:*:*

12 Sep 2024, 16:16

Type Values Removed Values Added
CVSS v2 : unknown
v3 : 8.3 		v2 : unknown
v3 : 8.8
CPE cpe:2.3:a:opentext:netiq_advance_authentication:*:*:*:*:*:*:*:*
First Time Opentext netiq Advance Authentication
Opentext
References () https://www.netiq.com/documentation/advanced-authentication-63/advanced-authentication-releasenotes-6351/data/advanced-authentication-releasenotes-6351.html - () https://www.netiq.com/documentation/advanced-authentication-63/advanced-authentication-releasenotes-6351/data/advanced-authentication-releasenotes-6351.html - Release Notes, Vendor Advisory

28 Aug 2024, 12:57

Type Values Removed Values Added
Summary
  • (es) Se identifica una versión del protocolo TLS insuficiente o débil en la comunicación del servidor del cliente de autenticación avanzada cuando se accede a un servicio específico entre dispositivos. Este problema afecta a las versiones de autenticación avanzada de NetIQ anteriores a la 6.3.5.1

28 Aug 2024, 07:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-08-28 07:15

Updated : 2024-09-13 18:04

NVD link : CVE-2021-38121

Mitre link : CVE-2021-38121

CVE.ORG link : CVE-2021-38121

JSON object : View

Products Affected

microfocus

  • netiq_advanced_authentication
CWE
CWE-326

Inadequate Encryption Strength