7.5
CVE-2017-1319
- EPSS 1.01%
- Veröffentlicht 08.06.2017 21:29:00
- Zuletzt bearbeitet 13.05.2026 00:24:29
- Quelle psirt@us.ibm.com
- CVE-Watchlists
- Unerledigt
LoginIBM Tivoli Federated Identity Manager 6.2 is affected by a vulnerability due to a missing secure attribute in encrypted session (SSL) cookie. IBM X-Force ID: 125731.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Tivoli Federated Identity Manager Version6.2.0
Ibm ≫ Tivoli Federated Identity Manager Version6.2.1
Ibm ≫ Tivoli Federated Identity Manager Version6.2.2
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.01% | 0.585 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 3.9 | 3.6 |
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
|
| nvd@nist.gov | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:P/I:N/A:N
|
CWE-326 Inadequate Encryption Strength
The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.
http://www-01.ibm.com/support/docview.wss?uid=swg22002871
http://www.securitytracker.com/id/1038504
https://exchange.xforce.ibmcloud.com/vulnerabilities/125731