Security Bulletin: Security vulnerabilities have been fixed in IBM Security Identity Manager (CVE-2021-29687, CVE-2021-29688)

Summary Security vulnerability has been fixed in IBM Security Identity Manager 6.0.2 Vulnerability Details CVEID: CVE-2021-29687 DESCRIPTION: IBM Security Identity Manager could allow a remote user to enumerate usernames due to a difference of responses from valid and invalid login attempts. CVSS...

CVE-2021-29688

CVE-2021-29688 affects IBM Security Identity Manager (ISIM) 7.0.2. The vulnerability allows a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser, which could be used in further attacks. The IBM bulletin for ISIM (CVE-2021-29688) list...