CVE-2021-29683

CWE-312 — Cleartext Storage of Sensitive Info3 documents3 sources
Severity
6.5MEDIUM
EPSS
0.1%
top 75.04%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Security Identity Manager
Timeline
PublishedMay 20
Latest updateMay 24

Description

IBM Security Identity Manager 7.0.2 stores user credentials in plain clear text which can be read by an authenticated user. IBM X-Force ID: 199998.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NExploitability: 2.8 | Impact: 3.6

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-mxhm-764h-x229: IBM Security Identity Manager 7↗2022-05-24
▶
CVEList
CVE-2021-29683: IBM Security Identity Manager 7↗2021-05-20
▶
CVE-2021-29683 (MEDIUM CVSS 6.5) | IBM Security Identity Manager 7.0.2 | cvebase.io