Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The Java servlets in the management console in IBM Tivoli Federated Identity Manager (TFIM) through 6.2.2 and Tivoli Federated Identity Manager Business Gateway (TFIMBG) before 6.2.2 do not require authentication for all resource downloads, which allows remote attackers to bypass intended J2EE security constraints, and obtain sensitive information related to (1) federation metadata or (2) a web plugin configuration template, via a crafted request.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
IBM Tivoli Federated Identity Manager 管理控制台访问漏洞
Vulnerability Description
IBM Tivoli Federated Identity Manager（TFIM）是美国IBM公司的一款跨企业的联邦身份管理产品。该产品向使用多种应用程序的用户提供Web和联合单点登录功能（SSO）。 IBM Tivoli Federated Identity Manager (TFIM)至6.2.2版本和Tivoli Federated Identity Manager Business Gateway (TFIMBG) 6.2.2之前版本中的管理控制台中的Java servlets中存在漏洞，该漏
CVSS Information
N/A
Vulnerability Type
N/A