Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
IBM Tivoli Federated Identity Manager (TFIM) before 6.1.1.14, 6.2.0 before 6.2.0.12, and 6.2.1 before 6.2.1.4 allows context-dependent attackers to discover (1) a cleartext LDAP Bind Password, (2) keystore passwords, (3) a cleartext Basic Authentication password from a client, or (4) a cleartext user password by leveraging a logging configuration with a log trace setting of all.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
IBM Tivoli Federated Identity Manager 安全漏洞
Vulnerability Description
IBM Tivoli Federated Identity Manager（TFIM）是美国IBM公司的一款跨企业的联邦身份管理产品。该产品向使用多种应用程序的用户提供Web和联合单点登录功能（SSO）。 IBM Tivoli Federated Identity Manager (TFIM)6.1.1.14之前版本，6.2.0.12之前的6.2.0版本，6.2.1.4之前的6.2.1版本中存在漏洞。通过利用设定了对全部日志进行跟踪的日志配置，上下文相关的攻击者利用该漏洞发现(1)明文LDAP绑定密码(2
CVSS Information
N/A
Vulnerability Type
N/A