OpenID Attribute Spoofing Vulnerability in IBM Tivoli Federated Identity Manager
CVE-2012-6359

Currently unrated

Key Information:

Vendor: IBM
Status: Tivoli Federated Identity Manager
Vendor: CVE Published:; 18 January 2013

What is CVE-2012-6359?

IBM Tivoli Federated Identity Manager and its Business Gateway versions prior to the specified updates lack proper validation for OpenID attributes in SREG and AX cases. This security flaw allows man-in-the-middle attackers to send unsigned attributes, potentially compromising OpenID provider data and facilitating unauthorized impersonation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch