CVE-2021-29686

CWE-732 — Incorrect Permission Assignment3 documents3 sources
Severity
8.8HIGH
EPSS
0.2%
top 62.20%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Security Identity Manager
Timeline
PublishedMay 20
Latest updateMay 24

Description

IBM Security Identity Manager 7.0.2 could allow an authenticated user to bypass security and perform actions that they should not have access to. IBM X-Force ID: 200015

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-f65q-5vw6-f46c: IBM Security Identity Manager 7↗2022-05-24
▶
CVEList
CVE-2021-29686: IBM Security Identity Manager 7↗2021-05-20
▶
CVE-2021-29686 (HIGH CVSS 8.8) | IBM Security Identity Manager 7.0.2 | cvebase.io