PT-2011-1291
CVE-2008-7299
·
تاريخ النشر
2011-08-12
·
تاريخ التحديث
2011-08-12
الوصف من
CVSS 2.0
5.0
متوسطةالمقاييسAV:N/AC:L/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
IBM Tivoli Federated Identity Manager (TFIM) version 6.2.0
Description
The issue is related to an incomplete SAML 1.x browser-artifact in IBM Tivoli Federated Identity Manager (TFIM), which allows remote OpenID providers to spoof assertions. This is achieved via vectors related to the
Issuer field.Recommendations
For IBM Tivoli Federated Identity Manager (TFIM) version 6.2.0, update to version 6.2.0.2 to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾