Lucene search
HistoryOct 03, 2022 - 4:24 p.m.
CVE-2009-5084
ibm
tfim
6.2.0
security
vulnerability
local users
sensitive information
5.7 Medium
AI Score
Confidence
Low
1.9 Low
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:M/Au:N/C:P/I:N/A:N
0.0004 Low
EPSS
Percentile
5.2%
IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.2, when com.tivoli.am.fim.infocard.delegates.InfoCardSTSDelegate tracing is enabled, creates a cleartext log entry containing a password, which might allow local users to obtain sensitive information by reading the log data.
Affected configurations
Node
ibmtivoli_federated_identity_managerMatch6.2.0
ORibmtivoli_federated_identity_managerMatch6.2.0.1
Related
cvelist
cvelist
CVE-2009-5084
2022-10-03 16:24:01
prion
prion
Design/Logic Flaw
2011-08-12 17:55:00
nvd
nvd
CVE-2009-5084
2011-08-12 17:55:00
5.7 Medium
AI Score
Confidence
Low
1.9 Low
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:M/Au:N/C:P/I:N/A:N
0.0004 Low
EPSS
Percentile
5.2%
Related for CVE-2009-5084