5
CVE-2011-3138
- EPSS 0.23%
- Veröffentlicht 12.08.2011 17:55:01
- Zuletzt bearbeitet 11.04.2025 00:51:21
- Quelle cve@mitre.org
- Teams Watchlist Login
- Unerledigt Login
The LTPA STS module support implementation in IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.9 and Tivoli Federated Identity Manager Business Gateway (TFIMBG) 6.2.0 before 6.2.0.9 relies on a static instance of a Java Development Kit (JDK) class, which might allow attackers to bypass LTPA token signature verification by leveraging lack of thread safety.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Tivoli Federated Identity Manager Version6.2.0
Ibm ≫ Tivoli Federated Identity Manager Version6.2.0.1
Ibm ≫ Tivoli Federated Identity Manager Version6.2.0.2
Ibm ≫ Tivoli Federated Identity Manager Version6.2.0.3
Ibm ≫ Tivoli Federated Identity Manager Version6.2.0.8
Ibm ≫ Tivoli Federated Identity Manager Business Gateway Version6.2.0
Ibm ≫ Tivoli Federated Identity Manager Business Gateway Version6.2.0.1
Ibm ≫ Tivoli Federated Identity Manager Business Gateway Version6.2.0.2
Ibm ≫ Tivoli Federated Identity Manager Business Gateway Version6.2.0.3
Ibm ≫ Tivoli Federated Identity Manager Business Gateway Version6.2.0.8
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
Typ | Quelle | Score | Percentile |
---|---|---|---|
EPSS | FIRST.org | 0.23% | 0.43 |
Quelle | Base Score | Exploit Score | Impact Score | Vector String |
---|---|---|---|---|
nvd@nist.gov | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:N/I:P/A:N
|