CVE-2021-38121CWE-326

Weak communication protocol identified in Advance Authentication client application

High · published August 28, 2024

CVSS v3.1
8.3
EPSS
0%
Percentile
7.4
In the wild
Unconfirmed
What it is

Insufficient or weak TLS protocol version identified in Advance authentication client server communication when specific service is accessed between devices.  This issue affects NetIQ Advance Authentication versions before 6.3.5.1

The record
Technical detail
CVSS v3.1
8.3 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.00183 · 7.4th percentile
Weakness
CWE-326 · Inadequate Encryption Strength
Published
2024-08-28T06:28Z
EPSS history
Timeline
  • 28 AUG 06:28Z
    Weak communication protocol identified in Advance Authentication client application
    cvelistv5