CVE-2021-38938: IBM Host Access Transformation Services

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

IBM Host Access Transformation Services (HATS) 9.6 through 9.6.1.4 and 9.7 through 9.7.0.3 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 210989.

Affected products

• IBM Host Access Transformation Services: from 9.6, up to and including 9.6.1.4; from 9.7, up to and including 9.7.0.3

Published 2024-03-15. Last modified 2026-06-17.