IBM Tivoli Federated Identity Manager Management Console Access Bypass Vulnerability
BID:56391
Info
IBM Tivoli Federated Identity Manager Management Console Access Bypass Vulnerability
| Bugtraq ID: | 56391 |
| Class: | Access Validation Error |
| CVE: |
CVE-2012-3315 |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 05 2012 12:00AM |
| Updated: | Nov 05 2012 12:00AM |
| Credit: | The vendor reported this issue |
| Vulnerable: |
IBM Tivoli Federated Identity Manager Business Gateway 6.2.1 IBM Tivoli Federated Identity Manager Business Gateway 6.2 IBM Tivoli Federated Identity Manager Business Gateway 6.1.1 IBM Tivoli Federated Identity Manager 6.2 |
| Not Vulnerable: | |
Discussion
IBM Tivoli Federated Identity Manager Management Console Access Bypass Vulnerability
IBM Tivoli Federated Identity Manager is prone to an access-bypass vulnerability.
An attacker can exploit this issue to bypass certain security restrictions and gain access to certain sensitive data; this may aid in launching further attacks.
IBM Tivoli Federated Identity Manager 6.1.1, 6.2.0, 6.2.1, and 6.2.2 are vulnerable.
IBM Tivoli Federated Identity Manager is prone to an access-bypass vulnerability.
An attacker can exploit this issue to bypass certain security restrictions and gain access to certain sensitive data; this may aid in launching further attacks.
IBM Tivoli Federated Identity Manager 6.1.1, 6.2.0, 6.2.1, and 6.2.2 are vulnerable.
Solution / Fix
IBM Tivoli Federated Identity Manager Management Console Access Bypass Vulnerability
Solution:
Updates are available; please see the references for more information.
Solution:
Updates are available; please see the references for more information.