IBM Tivoli Federated Identity Manager CVE-2012-3310 Information Disclosure Vulnerability

Bugtraq ID:	57518
Class:	Unknown
CVE:	CVE-2012-3310
Remote:	Yes
Local:	No
Published:	Jan 04 2013 12:00AM
Updated:	Jan 04 2013 12:00AM
Credit:	IBM
Vulnerable:	IBM Tivoli Federated Identity Manager 6.2.1 IBM Tivoli Federated Identity Manager 6.2 IBM Tivoli Federated Identity Manager 6.1.1
Not Vulnerable:	IBM Tivoli Federated Identity Manager 6.2.1 4 IBM Tivoli Federated Identity Manager 6.2.2 IBM Tivoli Federated Identity Manager 6.2.0.12 IBM Tivoli Federated Identity Manager 6.1.1.14

IBM Tivoli Federated Identity Manager CVE-2012-3310 Information Disclosure Vulnerability

The IBM Tivoli Federated Identity Manager is prone to an information-disclosure vulnerability.

Successful exploits will allow attackers to obtain sensitive information that may aid in further attacks.

IBM Federated Identity Manager versions 6.1.1, 6.2.0, and 6.2.1 are vulnerable.

IBM Tivoli Federated Identity Manager CVE-2012-3310 Information Disclosure Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

IBM Tivoli Federated Identity Manager CVE-2012-3310 Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references for details.

IBM Tivoli Federated Identity Manager CVE-2012-3310 Information Disclosure Vulnerability

References:

• Tivoli Directory Server Homepage (IBM)
  
• Tivoli Federated Identity Manager - Passwords exposed in trace files (IBM)