Unscored severity · published Nov 8, 2012
CVE-2012-3315
The Java servlets in the management console in IBM Tivoli Federated Identity Manager (TFIM) through 6.2.2 and Tivoli Federated Identity Manager Business Gateway (TFIMBG) before…
–
CVSS
2.6%
EPSS
No
On KEV
Description
The Java servlets in the management console in IBM Tivoli Federated Identity Manager (TFIM) through 6.2.2 and Tivoli Federated Identity Manager Business Gateway (TFIMBG) before 6.2.2 do not require authentication for all resource downloads, which allows remote attackers to bypass intended J2EE security constraints, and obtain sensitive information related to (1) federation metadata or (2) a web plugin configuration template, via a crafted request.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.6% · higher than 85% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TF
Tivoli Federated Identity Manager · Ibm
through 6.2.2; 6.1.1; 6.2.0; 6.2.0.1; 6.2.0.2; 6.2.0.3; +3 more · source: NVD
TF
Tivoli Federated Identity Manager Business Gateway · Ibm
through 6.2.1; 6.1.1; 6.2.0; 6.2.0.1; 6.2.0.2; 6.2.0.3; +1 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-3315
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-3315
secunia.com
http://secunia.com/advisories/51163
www-01.ibm.com
http://www-01.ibm.com/support/docview.wss?uid=swg1IV26825
www-01.ibm.com
http://www-01.ibm.com/support/docview.wss?uid=swg1IV26826
www-01.ibm.com
http://www-01.ibm.com/support/docview.wss?uid=swg1IV26827
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21615770
www-01.ibm.com
http://www-01.ibm.com/support/docview.wss?uid=swg21615772
More from Tivoli Federated Identity Manager
7.5
CVE-2017-1319
IBM Tivoli Federated Identity Manager 6.2 is affected by a vulnerability due to a missing secure attribute in encrypted session (SSL) cookie
6.1
CVE-2015-4959
Cross-site scripting (XSS) vulnerability in IBM Tivoli Federated Identity Manager (TFIM) 6.2.2 before FP16 allows remote attackers to inject arbitrary web script or HTML via a…
5.9
CVE-2018-1443
An XML parsing vulnerability affects IBM SAML-based single sign-on (SSO) systems (IBM Security Access Manager 9.0.0 - 9.0.4 and IBM Tivoli Federated Identity Manager 6.2 - 6.0.2.)…
5.4
CVE-2017-1320
IBM Tivoli Federated Identity Manager 6.2 is vulnerable to cross-site scripting
–
CVE-2015-1966
Multiple cross-site scripting (XSS) vulnerabilities in IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before FP17, 6.2.1 before FP9, and 6.2.2 before FP15, as used in Security…