Lucene search
HistoryOct 03, 2022 - 4:24 p.m.
CVE-2009-5084
ibm
tfim
6.2.0
security
vulnerability
local users
sensitive information
1.9 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:M/Au:N/C:P/I:N/A:N
5.7 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.2, when com.tivoli.am.fim.infocard.delegates.InfoCardSTSDelegate tracing is enabled, creates a cleartext log entry containing a password, which might allow local users to obtain sensitive information by reading the log data.
Affected configurations
Node
ibmtivoli_federated_identity_managerMatch6.2.0
ORibmtivoli_federated_identity_managerMatch6.2.0.1
Related
cvelist
cvelist
CVE-2009-5084
2022-10-03 16:24:01
nvd
nvd
CVE-2009-5084
2011-08-12 17:55:00
prion
prion
Design/Logic Flaw
2011-08-12 17:55:00
1.9 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:M/Au:N/C:P/I:N/A:N
5.7 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
Related for CVE-2009-5084