CVE-2021-29687

Name of the Vulnerable Software and Affected Versions IBM Security Identity Manager version 7.0.2

Description The issue allows a remote user to enumerate usernames due to a difference in responses from valid and invalid login attempts.

Recommendations For IBM Security Identity Manager version 7.0.2, consider implementing measures to make the login response uniform for both valid and invalid attempts to prevent username enumeration. At the moment, there is no information about a newer version that contains a fix for this vulnerability.