LDAP Injection Vulnerability in IBM Security Identity Manager Adapters
CVE-2021-20574
7.5HIGH
Summary
IBM Security Identity Manager Adapters versions 6.0 and 7.0 are susceptible to an LDAP injection vulnerability. A remote authenticated attacker can exploit this flaw using specially crafted requests, potentially gaining unauthorized access to other accounts within the system. This vulnerability emphasizes the need for robust security measures to protect sensitive user information from malicious actors.
Affected Version(s)
Security Identity Manager Adapters 6.0
Security Identity Manager Adapters 7.0
References
CVSS V3.1
Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved