CVE-2021-29688

IBM Security Identity Manager 7.0.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 200102.

• CWE-209

• https://exchange.xforce.ibmcloud.com/vulnerabilities/200102VDB Entry, Vendor Advisory
• https://www.ibm.com/support/pages/node/6454587Patch, Vendor Advisory
• https://www.ibm.com/support/pages/node/6454605Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/200102VDB Entry, Vendor Advisory
• https://www.ibm.com/support/pages/node/6454587Patch, Vendor Advisory
• https://www.ibm.com/support/pages/node/6454605Patch, Vendor Advisory

Published

May 20, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-29679IBM Cognos Analytics 11.1.7 and 11.2.0 could allow an authen…8.8
• CVE-2021-29681IBM InfoSphere Information Server 11.7 could allow an attack…5.3
• CVE-2021-29682IBM Security Identity Manager 7.0.2 could allow a remote att…5.3
• CVE-2021-29683IBM Security Identity Manager 7.0.2 stores user credentials …6.5
• CVE-2021-29686IBM Security Identity Manager 7.0.2 could allow an authentic…8.8
• CVE-2021-29687IBM Security Identity Manager 7.0.2 could allow a remote use…5.3
• CVE-2021-29691IBM Security Identity Manager 7.0.2 contains hard-coded cred…7.5
• CVE-2021-29692IBM Security Identity Manager 7.0.2 could allow a remote att…5.9
• CVE-2021-29693IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a local user that…4.4
• CVE-2021-29694IBM Spectrum Protect Plus 10.1.0 through 10.1.7 uses weaker …7.5
• CVE-2021-29695IBM Host firmware for LC-class Systems could allow a remote …6.5
• CVE-2021-29696IBM Cloud Pak for Security (CP4S) 1.5.0.0, 1.5.1.0, 1.6.0.0,…7.2