CVE-2021-20488

MEDIUM

IBM Security Identity Manager 6.0.2 - Privilege Escalation

Title source: llm

Description

IBM Security Identity Manager 6.0.2 could allow an authenticated malicious user to change the passwords of other users in the Windows AD environment when IBM Security Identity Manager Windows Password Synch Plug-in is deployed and configured. IBM X-Force ID: 197789.

References (2)

Core 2

Core References

Patch, Vendor Advisory x_refsource_confirm

https://www.ibm.com/support/pages/node/6464081

VDB Entry, Vendor Advisory vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/197789

Scores

CVSS v3 6.5

EPSS 0.0091

EPSS Percentile 56.1%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Details

Status published

Products (1)

ibm/security_identity_manager 6.0.2

Published Jun 16, 2021

Tracked Since Feb 18, 2026