Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:security_identity_manager:7.0.2:*:*:*:*:*:*:*

part: a version: 7.0.2 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductSecurity Identity Manager (75bbbad4-593e-5c7a-b9fe-e355eeb788ee)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-29692 vulnerable 2026-06-08 05:31:26.796337 Details available
LOW (3.1)
IBM Security Identity Manager 7.0.2 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 200253.
Published: 2021-05-20T15:10:33.497Z
Updated: 2024-09-16T18:54:06.200Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-29691 vulnerable 2026-06-08 05:31:26.795686 Details available
MEDIUM (5.9)
IBM Security Identity Manager 7.0.2 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 200252.
Published: 2021-05-20T15:10:32.826Z
Updated: 2024-09-16T23:36:16.681Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-29688 vulnerable 2026-06-08 05:31:26.795233 Details available
MEDIUM (5.3)
IBM Security Identity Manager 7.0.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 200102.
Published: 2021-05-20T15:10:32.109Z
Updated: 2024-09-17T00:51:05.256Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-29686 vulnerable 2026-06-08 05:31:26.791312 Details available
MEDIUM (5.4)
IBM Security Identity Manager 7.0.2 could allow an authenticated user to bypass security and perform actions that they should not have access to. IBM X-Force ID: 200015
Published: 2021-05-20T15:10:30.753Z
Updated: 2024-09-17T00:35:41.604Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-29683 vulnerable 2026-06-08 05:31:26.790752 Details available
MEDIUM (5.3)
IBM Security Identity Manager 7.0.2 stores user credentials in plain clear text which can be read by an authenticated user. IBM X-Force ID: 199998.
Published: 2021-05-20T15:10:30.105Z
Updated: 2024-09-17T00:02:12.555Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-29682 vulnerable 2026-06-08 05:31:26.790000 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.