CVE-2021-29688

High

IBM Security Identity Manager 7.0.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message…

ibm·CWE-209·Published 2021-05-20

CVSS

7.5

EPSS

0.02

KEV

Exploits

cve.orgen

259 chars

IBM Security Identity Manager 7.0.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 200102.

NVDen

259 chars

NVDes

292 chars

IBM Security Identity Manager versión 7.0.2, podría permitir a un atacante remoto obtener información confidencial cuando es devuelto un mensaje de error técnico detallado en el navegador. Esta información podría ser usada en nuevos ataques contra el sistema. IBM X-Force ID: 200102

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	5.0	10.0	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N
3.0	Primary	cve.org	5.3	—	—	CVSS:3.0/PR:N/UI:N/S:U/C:L/A:N/AV:N/I:N/AC:L/RC:C/E:U/RL:O