CVE-2021-20378: IBM Guardium Data Encryption

High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days.

IBM Guardium Data Encryption (GDE) 3.0.0.2 and 4.0.0.4 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 195709.

Affected products

• IBM Guardium Data Encryption: version 3.0.0.2 only; version 4.0.0.4 only

Published 2021-07-07. Last modified 2026-06-17.