PT-2012-1516 · Ibm · Ibm Tivoli Federated Identity Manager Business Gateway+1

Published 2012-01-04 · Updated 2017-08-17 · CVE-2011-1386

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions IBM Tivoli Federated Identity Manager (TFIM) and Tivoli Federated Identity Manager Business Gateway (TFIMBG) versions 6.1.1, 6.2.0, and 6.2.1

Description The issue arises from improper handling of signature validations based on SAML 1.0, 1.1, and 2.0, allowing remote attackers to bypass intended authentication or authorization requirements via a non-conforming SAML signature.

Recommendations For versions 6.1.1, 6.2.0, and 6.2.1, consider implementing additional validation checks for SAML signatures to ensure conformity with SAML 1.0, 1.1, and 2.0 standards until a patch is available. As a temporary workaround, restrict access to sensitive resources that rely on SAML-based authentication to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2011-1386

Affected Products

Ibm Tivoli Federated Identity Manager

Ibm Tivoli Federated Identity Manager Business Gateway

References · 6

• http://ibm.com/support/docview.wss?uid=swg21575309 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-1386 · Security Note
• http://www-01.ibm.com/support/docview.wss?uid=swg1IV10813 · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg1IV10793 · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg1IV10801 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/71686 · Note