CVE-2011-1386

Published: Jan 4, 2012Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

IBM Tivoli Federated Identity Manager (TFIM) and Tivoli Federated Identity Manager Business Gateway (TFIMBG) 6.1.1, 6.2.0, and 6.2.1 do not properly handle signature validations based on SAML 1.0, 1.1, and 2.0, which allows remote attackers to bypass intended authentication or authorization requirements via a non-conforming SAML signature.

Affected (6)

Products: Ibm: Tivoli Federated Identity Manager, Tivoli Federated Identity Manager Business Gateway

Ibm

2 products

Tivoli Federated Identity Manager

Tivoli Federated Identity Manager Business Gateway

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Ibm Tivoli Federated Identity Manager	Version 6.1.1
Ibm Tivoli Federated Identity Manager	Version 6.2.0
Ibm Tivoli Federated Identity Manager	Version 6.2.1
Ibm Tivoli Federated Identity Manager Business Gateway	Version 6.1.1
Ibm Tivoli Federated Identity Manager Business Gateway	Version 6.2.0
Ibm Tivoli Federated Identity Manager Business Gateway	Version 6.2.1