Authentication flaw

IBM Tivoli Federated Identity Manager TFIM before 6.1.1.14, 6.2.0 before 6.2.0.12, and 6.2.1 before 6.2.1.4 allows context-dependent attackers to discover 1 a cleartext LDAP Bind Password, 2 keystore passwords, 3 a cleartext Basic Authentication password from a client, or 4 a cleartext user...