IBM Tivoli Federated Identity Manager vulnerabilities, page 2

22 vulnerabilities

Known vulnerabilities in IBM Tivoli Federated Identity Manager, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

1.9CVE-2009-5084ibmtivoli_federated_identity_manager
EPSS score
0.27%
IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.2, when com.tivoli.am.fim.infocard.delegates.InfoCardSTSDelegate tracing is enabled, creates a cleartext log entry containing a password, which might allow local users to obtain sensitive information by reading the log data.6.8CVE-2009-5083ibmtivoli_federated_identity_manager
EPSS score
1.21%
IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.2, when configured as an OpenID relying party, does not perform the expected login rejection upon receiving an OP-Identifier from an OpenID provider, which allows remote attackers to bypass authentication via unspecified vectors.