CVE-2021-38971: IBM Data Virtualization On Cloud Pak For Data

Medium severity, CVSS 4.9. EPSS: 0.9% chance of exploitation in the next 30 days.

IBM Data Virtualization on Cloud Pak for Data 1.3.0, 1.4.1, 1.5.0, 1.7.1 and 1.7.3 could allow an authorized user to bypass data masking rules and obtain sensitve information. IBM X-Force ID: 212620.

Affected products

• IBM Data Virtualization On Cloud Pak For Data: from 1.7.1, up to and including 1.7.3; version 1.3.0 only; version 1.4.1 only; version 1.5.0 only

Published 2022-03-14. Last modified 2026-06-17.