CVE-2012-3314
IBM Tivoli Federated Identity Manager (TFIM) and Tivoli Federated Identity Manager Business Gateway (TFIMBG) 6.1.1, 6.2.0, 6.2.1, and 6.2.2 allow remote attackers to establish sessions via a crafted message that leverages (1) a signature-validation…
Does this matter?
Lower severity and a low EPSS score (0.84%). Track it; it rarely justifies an emergency change on its own.
Description
IBM Tivoli Federated Identity Manager (TFIM) and Tivoli Federated Identity Manager Business Gateway (TFIMBG) 6.1.1, 6.2.0, 6.2.1, and 6.2.2 allow remote attackers to establish sessions via a crafted message that leverages (1) a signature-validation bypass for SAML messages containing unsigned elements, (2) incorrect validation of XML messages, or (3) a certificate-chain validation bypass for an XML signature element that contains the signing certificate.
- CVSS 2.0
- 5.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:N
- EPSS
- 0.84% probability · 56th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-20
- Affected
- ibm/tivoli federated identity manager · ibm/tivoli federated identity manager business gateway
- Source
- psirt@us.ibm.com
References
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV23435
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV23442
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV23445
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV23448
- http://www-01.ibm.com/support/docview.wss?uid=swg21612612Patch, Vendor Advisory
- http://www.securityfocus.com/bid/55732
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV23435
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV23442
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV23445
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV23448
- http://www-01.ibm.com/support/docview.wss?uid=swg21612612Patch, Vendor Advisory
- http://www.securityfocus.com/bid/55732
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.