PT-2011-1333 · Ibm · Ibm Tivoli Federated Identity Manager

Publicado 2011-08-12 · Atualizado 2012-04-25 · CVE-2009-5084

Positive Technologies (AI Summary)

CVSS v2.0

1.9

Baixa

Vetor base

AV:L/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Tivoli Federated Identity Manager (TFIM) versions 6.2.0 through 6.2.0.2 (excluding 6.2.0.2)

Description The issue allows local users to potentially obtain sensitive information by reading log data when a specific tracing feature is enabled. This could lead to the exposure of passwords.

Recommendations For IBM Tivoli Federated Identity Manager (TFIM) versions 6.2.0 through 6.2.0.1, update to version 6.2.0.2 to resolve the issue. As a temporary workaround, consider disabling the com.tivoli.am.fim.infocard.delegates.InfoCardSTSDelegate tracing feature until a patch is available.

Correção

Enumeração de Fraquezas

CWE-310

Identificadores relacionados

CVE-2009-5084

Produtos afetados

Ibm Tivoli Federated Identity Manager

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2009-5084 · Nota de Segurança
• http://ibm.com/support/docview.wss?uid=swg24029497 · Nota
• http://www-01.ibm.com/support/docview.wss?uid=swg1IZ44560 · Correção, Aviso do Fabricante