Low · 3.7 CVE-2021-29687 EUVD-2021-16161GHSA-r8w9-96p7-xxh6

IBM Security Identity Manager 7.0.2 could allow a remote user to enumerate usernames due to a difference of responses from valid and invali…

Published May 20, 2021 · Updated Sep 16, 2024 · Assigned by ibm

Vendor: IBM Product: Security Identity Manager

Description

IBM Security Identity Manager 7.0.2 could allow a remote user to enumerate usernames due to a difference of responses from valid and invalid login attempts. IBM X-Force ID: 200018

Affected products

Vendor	Product	Affected	Fixed
IBM	Security Identity Manager	6.0.2	—

References

https://www.ibm.com/support/pages/node/6454605
ibm-sim-cve202129687-info-disc (200018) vdb-entry