CVE-2021-20488

—

CVSS 3.1

6.5 medium

EPSS

<1%p58

Published

Jun 16, 2021 (Jun 16, 2021)

Modified

Jun 17, 2026

Description

IBM Security Identity Manager 6.0.2 could allow an authenticated malicious user to change the passwords of other users in the Windows AD environment when IBM Security Identity Manager Windows Password Synch Plug-in is deployed and configured. IBM X-Force ID: 197789.

Vendors: ibm
Products: security identity manager
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.9%)

In the news0 stories

No ingested article mentions this CVE yet.