CVE-2021-38121

8.8 highEPSS 0.2%

Insufficient or weak TLS protocol version identified in Advance authentication client server communication when specific service is accessed between devices. This issue affects NetIQ Advance Authentication versions before 6.3.5.1

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 7% of CVEs (scores of 2026-10-31)
CWE: CWE-326
Published: 2024-08-28
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

microfocus:netiq_advanced_authentication

References

https://www.netiq.com/documentation/advanced-authentication-63/advanced-authentication-releasenotes-6351/data/advanced-authentication-releasenotes-6351.html

Check your stack JSON