14 results (0.010 seconds)

CVSS: 6.8EPSS: 0%CPEs: 2EXPL: 0

CVE-2021-29864

https://notcve.org/view.php?id=CVE-2021-29864

IBM Security Identity Manager 6.0 and 6.0.2 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 206089 IBM Security Identity Manager versiones 6.0 y 6.0.2, podría permitir a un atacante remoto conducir ataques de suplantación de identidad, usando un ataque de redireccionamiento abierto. Al persuadir a una víctima para que visite un sitio web especialmente diseñado, un atacante remoto podría explotar esta vulnerabilidad para falsificar la URL mostrada y redirigir al usuario a un sitio web malicioso que parecería ser confiable. • https://exchange.xforce.ibmcloud.com/vulnerabilities/206089 https://www.ibm.com/support/pages/node/6616101 • CWE-601: URL Redirection to Untrusted Site ('Open Redirect') •

CVSS: 7.5EPSS: 0%CPEs: 5EXPL: 0

CVE-2021-20488

https://notcve.org/view.php?id=CVE-2021-20488

IBM Security Identity Manager 6.0.2 could allow an authenticated malicious user to change the passwords of other users in the Windows AD environment when IBM Security Identity Manager Windows Password Synch Plug-in is deployed and configured. IBM X-Force ID: 197789. IBM Security Identity Manager 6.0.2 podría permitir a un usuario malintencionado autentificado cambiar las contraseñas de otros usuarios en el entorno de Windows AD cuando se despliega y configura el complemento de sincronización de contraseñas de Windows de IBM Security Identity Manager. ID de IBM X-Force: 197789 • https://exchange.xforce.ibmcloud.com/vulnerabilities/197789 https://www.ibm.com/support/pages/node/6464081 •

CVSS: 6.5EPSS: 0%CPEs: 5EXPL: 0

CVE-2021-20483

https://notcve.org/view.php?id=CVE-2021-20483

IBM Security Identity Manager 6.0.2 is vulnerable to server-side request forgery (SSRF). By sending a specially crafted request, a remote authenticated attacker could exploit this vulnerability to obtain sensitive data. IBM X-Force ID: 197591. IBM Security Identity Manager versión 6.0.2, es vulnerable a un ataque de tipo server-side request forgery (SSRF). Al enviar una petición especialmente diseñada, un atacante remoto autenticado podría explotar esta vulnerabilidad para obtener datos confidenciales. • https://exchange.xforce.ibmcloud.com/vulnerabilities/197591 https://www.ibm.com/support/pages/node/6464081 • CWE-918: Server-Side Request Forgery (SSRF) •

CVSS: 7.5EPSS: 0%CPEs: 6EXPL: 0

CVE-2021-29688

https://notcve.org/view.php?id=CVE-2021-29688

IBM Security Identity Manager 7.0.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 200102. IBM Security Identity Manager versión 7.0.2, podría permitir a un atacante remoto obtener información confidencial cuando es devuelto un mensaje de error técnico detallado en el navegador. Esta información podría ser usada en nuevos ataques contra el sistema. • https://exchange.xforce.ibmcloud.com/vulnerabilities/200102 https://www.ibm.com/support/pages/node/6454587 https://www.ibm.com/support/pages/node/6454605 • CWE-209: Generation of Error Message Containing Sensitive Information •

CVSS: 5.3EPSS: 0%CPEs: 5EXPL: 0

CVE-2021-29687

https://notcve.org/view.php?id=CVE-2021-29687

IBM Security Identity Manager 7.0.2 could allow a remote user to enumerate usernames due to a difference of responses from valid and invalid login attempts. IBM X-Force ID: 200018 IBM Security Identity Manager versión 7.0.2, podría permitir a un usuario remoto enumerar nombres de usuario debido a una diferencia de respuestas de intentos de inicio de sesión válidos e inválidos. IBM X-Force ID: 200018 • https://exchange.xforce.ibmcloud.com/vulnerabilities/200018 https://www.ibm.com/support/pages/node/6454605 • CWE-203: Observable Discrepancy •