Security Advisory

CVE-2009-5083

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2011-08-12 17:00:00
Last updated 2024-09-17 04:03:56
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.2, when configured as an OpenID relying party, does not perform the expected login rejection upon receiving an OP-Identifier from an OpenID provider, which allows remote attackers to bypass authentication via unspecified vectors.