CVE-2009-5085

CVE-2009-5085 affects IBM Tivoli Federated Identity Manager (TFIM) version 6.2.0 prior to 6.2.0.2 when configured as an OpenID provider. The issue arises because TFIM does not delete the site information cookie after a user deletes a relying-party trust entry, enabling user-assisted remote attack...