CVE-2021-20488
Medium
Published: 16 June 2021
Published
16 June 2021
Modified
21 November 2024
KEV Added
—
Patch
—
CVSS Score v3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
EPSS Score
0.0019
41.0th percentile
Risk Priority
13
60% EPSS · 20% KEV · 20% CVSS
Summary
CVE-2021-20488 is a medium-severity an unspecified weakness vulnerability in Ibm Security Identity Manager. Its CVSS base score is 6.5 (Medium).
Operationally, ranked at the 41.0th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2021-7906
Vulnerability details
IBM Security Identity Manager 6.0.2 could allow an authenticated malicious user to change the passwords of other users in the Windows AD environment when IBM Security Identity Manager Windows Password Synch Plug-in is deployed and configured. IBM X-Force ID: 197789.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
ibm
security identity manager
6.0.2
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.