Security Bulletin: IBM Security Identity Manager Password Synchronization Plug-in for Windows AD affected by multiple vulnerabilities (CVE-2021-20483, CVE-2021-20488)

Summary IBM has announced a release for IBM Security Identity Manager Password Synchronization Plug-in for Windows AD to address several security vulnerabilities. The vulnerabilities concern server side request forgery and account take over. Vulnerability Details CVEID: CVE-2021-20483 DESCRIPTION...

CVE-2021-20483

IBM Security Identity Manager 6.0.2 is affected by CVE-2021-20483, a server-side request forgery (SSRF) vulnerability. The issue arises in the IBM Security Identity Manager Password Synchronization plug-in for Windows AD, enabling an authenticated remote attacker to obtain sensitive data. IBM’s a...