Sensitive Information Exposure in IBM Tivoli Federated Identity Manager
CVE-2009-5084

Currently unrated

Key Information:

Vendor

IBM
Status
Tivoli Federated Identity Manager
Vendor
CVE Published:
12 August 2011

What is CVE-2009-5084?

IBM Tivoli Federated Identity Manager version 6.2.0 prior to 6.2.0.2 may expose sensitive information through cleartext log entries. When the tracing functionality of the InfoCardSTSDelegate is enabled, it can result in a vulnerability where passwords are logged in plaintext. This misconfiguration allows local users to read the log data and potentially access sensitive credentials, compromising the security of the system.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

http://www-01.ibm.com/support/docview.wss?uid=swg1IZ44560
vendor-advisoryx_refsource_AIXAPAR
http://www.ibm.com/support/docview.wss?uid=swg24029497
x_refsource_CONFIRM

Timeline

  • Vulnerability Reserved

  • Vulnerability published

JSON
.