CVE-2021-20574high

CVE-2021-20574: high-severity vulnerability in IBM Security Identity Manager Adapters

Published · Updated

Follow this CVE+ Monitor Security Identity Manager Adapters

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.5epss 1.7%
IBM Security Identity Manager Adapters 6.0 and 7.0 could allow a remote authenticated attacker to conduct an LDAP injection. By using a specially crafted request, an attacker could exploit this vulnerability and takeover other accounts. IBM X-Force ID: 199252.
CVSS:3.0/PR:L/S:U/A:H/AC:H/AV:N/UI:N/I:H/C:H/RL:O/E:U/RC:C
Affected products
IBM · Security Identity Manager Adapters
Related CVEs — IBM Security Identity Manager Adapters

In the same product, most dangerous first.

CVE-2021-20573MEDIUMCVE-2021-20573EPSS 1.5%CVE-2021-20572MEDIUMCVE-2021-20572EPSS 1.5%CVE-2021-20494MEDIUMCVE-2021-20494EPSS 1.1%