Ibm

Tivoli Federated Identity Manager Business Gateway

10 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.8

CVE-2013-5431

  • EPSS 0.51%
  • Veröffentlicht 01.11.2013 02:55:04
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Open redirect vulnerability in IBM Tivoli Federated Identity Manager (TFIM) 6.1.1 before IF 15, 6.2.0 before IF 14, 6.2.1, and 6.2.2 before IF 8 and Tivoli Federated Identity Manager Business Gateway (TFIMBG) 6.1.1 before IF 15, 6.2.0 before IF 14, 6...

4.3

CVE-2013-0582

  • EPSS 0.26%
  • Veröffentlicht 02.05.2013 18:55:05
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Cross-site scripting (XSS) vulnerability in IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.12, 6.2.1 before 6.2.1.5, and 6.2.2 before 6.2.2.4 and Tivoli Federated Identity Manager Business Gateway (TFIMBG) 6.2.0 before 6.2.0.12 and 6...

4.3

CVE-2012-6359

  • EPSS 0.52%
  • Veröffentlicht 18.01.2013 21:55:00
  • Zuletzt bearbeitet 11.04.2025 00:51:21

IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.11, 6.2.1 before 6.2.1.3, and 6.2.2 before 6.2.2.2 and Tivoli Federated Identity Manager Business Gateway (TFIMBG) 6.2.0 before 6.2.0.11, 6.2.1 before 6.2.1.3, and 6.2.2 before 6.2.2.2 d...

5

CVE-2012-3315

  • EPSS 0.41%
  • Veröffentlicht 08.11.2012 11:46:23
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The Java servlets in the management console in IBM Tivoli Federated Identity Manager (TFIM) through 6.2.2 and Tivoli Federated Identity Manager Business Gateway (TFIMBG) before 6.2.2 do not require authentication for all resource downloads, which all...

5.8

CVE-2012-3314

  • EPSS 0.18%
  • Veröffentlicht 02.10.2012 21:55:01
  • Zuletzt bearbeitet 11.04.2025 00:51:21

IBM Tivoli Federated Identity Manager (TFIM) and Tivoli Federated Identity Manager Business Gateway (TFIMBG) 6.1.1, 6.2.0, 6.2.1, and 6.2.2 allow remote attackers to establish sessions via a crafted message that leverages (1) a signature-validation b...

4.3

CVE-2011-1386

  • EPSS 0.19%
  • Veröffentlicht 04.01.2012 03:55:09
  • Zuletzt bearbeitet 11.04.2025 00:51:21

IBM Tivoli Federated Identity Manager (TFIM) and Tivoli Federated Identity Manager Business Gateway (TFIMBG) 6.1.1, 6.2.0, and 6.2.1 do not properly handle signature validations based on SAML 1.0, 1.1, and 2.0, which allows remote attackers to bypass...

10

CVE-2011-3135

  • EPSS 0.53%
  • Veröffentlicht 12.08.2011 17:55:01
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Unspecified vulnerability in the Runtime in IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.9 and Tivoli Federated Identity Manager Business Gateway (TFIMBG) 6.2.0 before 6.2.0.9 has unknown impact and attack vectors.

10

CVE-2011-3136

  • EPSS 0.48%
  • Veröffentlicht 12.08.2011 17:55:01
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Unspecified vulnerability in the Management Console in IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.9 and Tivoli Federated Identity Manager Business Gateway (TFIMBG) 6.2.0 before 6.2.0.9 has unknown impact and attack vectors, aka A...

10

CVE-2011-3137

  • EPSS 1.33%
  • Veröffentlicht 12.08.2011 17:55:01
  • Zuletzt bearbeitet 11.04.2025 00:51:21

Unspecified vulnerability in the Management Console in IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.9 and Tivoli Federated Identity Manager Business Gateway (TFIMBG) 6.2.0 before 6.2.0.9 has unknown impact and attack vectors, aka A...

5

CVE-2011-3138

  • EPSS 0.23%
  • Veröffentlicht 12.08.2011 17:55:01
  • Zuletzt bearbeitet 11.04.2025 00:51:21

The LTPA STS module support implementation in IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.9 and Tivoli Federated Identity Manager Business Gateway (TFIMBG) 6.2.0 before 6.2.0.9 relies on a static instance of a Java Development Kit...