IBM Tivoli Federated Identity Manager CVE-2017-1319 Remote Information Disclosure Vulnerability

Bugtraq ID:	98480
Class:	Design Error
CVE:	CVE-2017-1319
Remote:	Yes
Local:	No
Published:	May 16 2017 12:00AM
Updated:	May 16 2017 12:00AM
Credit:	IBM
Vulnerable:	IBM Tivoli Federated Identity Manager 6.2.1 IBM Tivoli Federated Identity Manager 6.2 IBM Tivoli Federated Identity Manager 6.2.2
Not Vulnerable:

IBM Tivoli Federated Identity Manager CVE-2017-1319 Remote Information Disclosure Vulnerability

IBM Tivoli Federated Identity Manager is prone to an information-disclosure vulnerability.

Attackers can exploit this issue to gain access to sensitive information. Information obtained may lead to further attacks.

IBM Tivoli Federated Identity Manager 6.2.2, 6.2.1 and 6.2.0 are vulnerable; other versions may also be affected.

IBM Tivoli Federated Identity Manager CVE-2017-1319 Remote Information Disclosure Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

IBM Tivoli Federated Identity Manager CVE-2017-1319 Remote Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

IBM Tivoli Federated Identity Manager CVE-2017-1319 Remote Information Disclosure Vulnerability

References:

• IBM Homepage (IBM)
  
• swg22002871: IBM Tivoli Federated Identity Manager is affected by a missing secu (IBM)