CVE-2012-3314: CVE-2012-3314

Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2012-3314

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Description

IBM Tivoli Federated Identity Manager (TFIM) and Tivoli Federated Identity Manager Business Gateway (TFIMBG) 6.1.1, 6.2.0, 6.2.1, and 6.2.2 allow remote attackers to establish sessions via a crafted message that leverages (1) a signature-validation bypass for SAML messages containing unsigned elements, (2) incorrect validation of XML messages, or (3) a certificate-chain validation bypass for an XML signature element that contains the signing certificate.

Source: NVD (National Vulnerability Database)

CVSS Information

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Type

N/A

Source: NVD (National Vulnerability Database)

Vulnerability Title

IBM TFIM/TFIMBG 输入验证漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

IBM Tivoli Federated Identity Manager（TFIM）是美国IBM公司的一款跨企业的联邦身份管理产品。该产品向使用多种应用程序的用户提供Web和联合单点登录功能（SSO）。 IBM Tivoli Federated Identity Manager (TFIM)和Tivoli Federated Identity Manager Business Gateway (TFIMBG) 6.1.1、6.2.0、6.2.1和6.2.2版本中存在漏洞。远程攻击者可利用该漏洞建立会话，

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
-	n/a	n/a	-

II. Public POCs for CVE-2012-3314

#	POC Description	Source Link	Shenlong Link

AI-Generated POCPremium

No public POC found.

III. Intelligence Information for CVE-2012-3314

Please Login to view more intelligence information

http://www-01.ibm.com/support/docview.wss?uid=swg21612612x_refsource_CONFIRM
http://www.securityfocus.com/bid/55732vdb-entryx_refsource_BID
http://www-01.ibm.com/support/docview.wss?uid=swg1IV23448vendor-advisoryx_refsource_AIXAPAR
http://www-01.ibm.com/support/docview.wss?uid=swg1IV23442vendor-advisoryx_refsource_AIXAPAR
http://www-01.ibm.com/support/docview.wss?uid=swg1IV23435vendor-advisoryx_refsource_AIXAPAR
http://www-01.ibm.com/support/docview.wss?uid=swg1IV23445vendor-advisoryx_refsource_AIXAPAR
https://nvd.nist.gov/vuln/detail/CVE-2012-3314

IV. Related Vulnerabilities

Same product: n/a

Same vendor: n/a

V. Comments for CVE-2012-3314

No comments yet

Goal Reached Thanks to every supporter — we hit 100%!

I. Basic Information for CVE-2012-3314

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Affected Products

II. Public POCs for CVE-2012-3314

III. Intelligence Information for CVE-2012-3314

IV. Related Vulnerabilities

V. Comments for CVE-2012-3314

Leave a comment