Medium severity6.5NVD Advisory· Published Jun 16, 2021· Updated Jun 17, 2026

CVE-2021-20488

Description

IBM Security Identity Manager 6.0.2 could allow an authenticated malicious user to change the passwords of other users in the Windows AD environment when IBM Security Identity Manager Windows Password Synch Plug-in is deployed and configured. IBM X-Force ID: 197789.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

IBM/Security Identity Manager3 versions
cpe:2.3:a:ibm:security_identity_manager:6.0.2:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:ibm:security_identity_manager:6.0.2:*:*:*:*:*:*:*
- (no CPE)range: 6.0.2
- (no CPE)range: 6.0.2
IBM/Security Identity Manager Windows Password Synch Plug-inllm-create
Range: 6.0.2

Patches

Vulnerability mechanics

References

www.ibm.com/support/pages/node/6464081nvdPatchVendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/197789nvdVDB EntryVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000