Back to CVE Browser

CVE-2009-5083

MEDIUM

6.8

CVSS Severity Score

EPSS Score0.0560%

EPSS Percentile10.58th

PublishedAug 12, 2011

Last ModifiedApr 29, 2026

Vulnerability Description

IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.2, when configured as an OpenID relying party, does not perform the expected login rejection upon receiving an OP-Identifier from an OpenID provider, which allows remote attackers to bypass authentication via unspecified vectors.

Affected Platforms (CPE)

📦

Ibm

Tivoli Federated Identity Manager

= 6.2.0

📦

Ibm

Tivoli Federated Identity Manager

= 6.2.0.1

References & Advisories

🔗 http://www-01.ibm.com/support/docview.wss?uid=swg1IZ44571

🔗 http://www.ibm.com/support/docview.wss?uid=swg24029497

🔗 http://www-01.ibm.com/support/docview.wss?uid=swg1IZ44571

🔗 http://www.ibm.com/support/docview.wss?uid=swg24029497

Related Vulnerabilities

CVE-2011-313710.0

Unspecified vulnerability in the Management Console in IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.9 and Tivol...

CVE-2011-313610.0

Unspecified vulnerability in the Management Console in IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.9 and Tivol...

CVE-2011-313510.0

Unspecified vulnerability in the Runtime in IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.9 and Tivoli Federated...

CVE-2017-13197.5

IBM Tivoli Federated Identity Manager 6.2 is affected by a vulnerability due to a missing secure attribute in encrypted session (S...