Security Advisory

CVE-2009-5085

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2011-08-12 17:00:00

Last updated 2024-09-16 20:48:10

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.2, when configured as an OpenID provider, does not delete the site information cookie in response to a user's deletion of a relying-party trust entry, which allows user-assisted remote attackers to bypass intended trust restrictions via vectors that trigger absence of the consent-to-authenticate page.

← Browse all CVEs View on cve.org ↗