返回 CVE 瀏覽器

CVE-2009-5083

MEDIUM

6.8

CVSS Severity Score

EPSS Score0.0560%

EPSS Percentile10.58th

Published2011年8月12日

Last Modified2026年4月29日

Vulnerability Description

IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.2, when configured as an OpenID relying party, does not perform the expected login rejection upon receiving an OP-Identifier from an OpenID provider, which allows remote attackers to bypass authentication via unspecified vectors.

Affected Platforms (CPE)

📦

Ibm

Tivoli Federated Identity Manager

= 6.2.0

📦

Ibm

Tivoli Federated Identity Manager

= 6.2.0.1

References & Advisories

🔗 http://www-01.ibm.com/support/docview.wss?uid=swg1IZ44571

🔗 http://www.ibm.com/support/docview.wss?uid=swg24029497

🔗 http://www-01.ibm.com/support/docview.wss?uid=swg1IZ44571

🔗 http://www.ibm.com/support/docview.wss?uid=swg24029497

相關漏洞威脅

CVE-2011-313710.0

Unspecified vulnerability in the Management Console in IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.9 and Tivol...

CVE-2011-313610.0

Unspecified vulnerability in the Management Console in IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.9 and Tivol...

CVE-2011-313510.0

Unspecified vulnerability in the Runtime in IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.9 and Tivoli Federated...

CVE-2017-13197.5

IBM Tivoli Federated Identity Manager 6.2 is affected by a vulnerability due to a missing secure attribute in encrypted session (S...