CVE-2010-3546

CVE-2010-3546 affects Sun Java System Identity Manager (Oracle Sun Products Suite 8.1). The vulnerability is described as unspecified, allowing remote attackers to affect confidentiality and integrity via unknown vectors. Oracle’s October 2010 CPU lists CVE-2010-3546 under the Sun Products Suite ...

Design/Logic Flaw

The engine installer in Novell Identity Manager aka IDM 3.6.1 stores admin tree credentials in /tmp/idmInstall.log, which allows local users to obtain sensitive information by reading this file...

CVE-2010-2337

Open redirect vulnerability in RSA Federated Identity Manager 4.0 before 4.0.25 and 4.1 before 4.1.26 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unknown vectors...

Open redirect

Open redirect vulnerability in RSA Federated Identity Manager 4.0 before 4.0.25 and 4.1 before 4.1.26 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unknown vectors...

CVE-2010-2337

Open redirect vulnerability in RSA Federated Identity Manager 4.0 before 4.0.25 and 4.1 before 4.1.26 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unknown vectors...

CVE-2010-2337

CVE-2010-2337 describes an open redirect vulnerability in RSA Federated Identity Manager (FIM) 4.0 before 4.0.25 and 4.1 before 4.1.26, enabling remote attackers to redirect users to arbitrary web sites and potentially facilitate phishing. The NVD entry cites a CVSS v2 base score of 6.0 (AV:N/AC:...

ESA-2010-011: RSA, The Security Division of EMC, announces a fix for potential security vulnerability in RSAR Federated Identity Manager

ESA-2010-011: RSA, The Security Division of EMC, announces a fix for potential security vulnerability in RSAr Federated Identity Manager Security Advisory Updated July 20, 2010 Summary: RSAr Federated Identity Manager may be impacted by potential arbitrary URL redirection vulnerability that may b...

CORE-2010-0316 - Novell iManager Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://corelabs.coresecurity.com/ Novell iManager Multiple Vulnerabilities 1. Advisory Information Title: Novell iManager Multiple Vulnerabilities Advisory Id: CORE-2010-0316 Advisory URL:...

Input validation

Unspecified vulnerability in Sun Java System Identity Manager aka IdM 8.1.0.5 and 8.1.0.6, when Sun Java System Access Manager, OpenSSO Enterprise 8.0, or IBM Tivoli Access Manager is used, allows remote attackers to obtain administrative access via unknown vectors...

CVE-2010-0311

Unspecified vulnerability in Sun Java System Identity Manager aka IdM 8.1.0.5 and 8.1.0.6, when Sun Java System Access Manager, OpenSSO Enterprise 8.0, or IBM Tivoli Access Manager is used, allows remote attackers to obtain administrative access via unknown vectors...

CVE-2010-0311

Technical details about CVE-2010-0311 are not publicly provided in the supplied documents; no concrete affected products, versions, or remediation info are listed here. Monitor for updates in the connected sources.

IBM Tivoli Identity Manager SSUI跨站脚本漏洞

CVE ID: CVE-2009-3262 IBM Tivoli Identity Manager提供一个安全、自动化且基于策略的解决方案，帮助有效地管理IT环境中用户帐号、访问权限和密码的创建到终止的整个过程。 Tivoli Identity Manager的Self Service UI（SSUI）没有正确地过滤用户所提交的请求，通过认证的远程攻击者可以通过配置文件的last name字段执行跨站脚本攻击，导致注入并执行任意脚本或HTML代码。 IBM Tivoli Identity Manager 5.0 厂商补丁： IBM ---...

CVE-2009-3262

Cross-site scripting XSS vulnerability in the Self Service UI SSUI in IBM Tivoli Identity Manager ITIM 5.0.0.5 allows remote authenticated users to inject arbitrary web script or HTML via the last name field in a profile...

Cross site scripting

Cross-site scripting XSS vulnerability in the Self Service UI SSUI in IBM Tivoli Identity Manager ITIM 5.0.0.5 allows remote authenticated users to inject arbitrary web script or HTML via the last name field in a profile...

CVE-2009-3262

Cross-site scripting XSS vulnerability in the Self Service UI SSUI in IBM Tivoli Identity Manager ITIM 5.0.0.5 allows remote authenticated users to inject arbitrary web script or HTML via the last name field in a profile...

CVE-2009-3262

IBM Tivoli Identity Manager (ITIM) 5.0.0.5 Self Service UI (SSUI) is affected by a Cross-site scripting (XSS) vulnerability: remote authenticated users can inject arbitrary script/HTML via the last name field in a profile due to insufficient input filtering. Impact is XSS within authenticated ses...

IBM Tivoli Identity Manager 5.0.5 - User Profile HTML Injection

IBM Tivoli Identity Manager 5.0.5 - User Profile HTML Injection source: https://www.securityfocus.com/bid/36293/info IBM Tivoli Identity Manager is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically...

IBM Tivoli Identity Manager 5.0.5 - User Profile HTML Injection

source: https://www.securityfocus.com/bid/36293/info IBM Tivoli Identity Manager is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code would run in...

CVE-2009-2583

Multiple session fixation vulnerabilities in IBM Tivoli Identity Manager ITIM 5.0.0.6 allow remote attackers to hijack web sessions via unspecified vectors involving the 1 console and 2 self service interfaces...

Session fixation

Multiple session fixation vulnerabilities in IBM Tivoli Identity Manager ITIM 5.0.0.6 allow remote attackers to hijack web sessions via unspecified vectors involving the 1 console and 2 self service interfaces...