Security Bulletin: Security vulnerabilities have been fixed in IBM Security Identity Manager (CVE-2021-29687, CVE-2021-29688)

Summary Security vulnerability has been fixed in IBM Security Identity Manager 6.0.2 Vulnerability Details CVEID: CVE-2021-29687 DESCRIPTION: IBM Security Identity Manager could allow a remote user to enumerate usernames due to a difference of responses from valid and invalid login attempts. CVSS...

CVE-2021-29687

IBM Security Identity Manager contains two CVEs (CVE-2021-29687 and CVE-2021-29688) related to information disclosure via login error handling. According to IBM Security Bulletin, the issue allows a remote attacker to enumerate usernames through differences in responses to valid vs. invalid login...

CVE-2021-29687

IBM Security Identity Manager 7.0.2 could allow a remote user to enumerate usernames due to a difference of responses from valid and invalid login attempts. IBM X-Force ID: 200018...