Sign-up

ID

VAR-201210-0309


CVE

CVE-2012-3314


TITLE

IBM Tivoli Federated Identity Manager Vulnerability that establishes a session in a product

Trust: 0.8

sources: JVNDB: JVNDB-2012-004720

DESCRIPTION

IBM Tivoli Federated Identity Manager (TFIM) and Tivoli Federated Identity Manager Business Gateway (TFIMBG) 6.1.1, 6.2.0, 6.2.1, and 6.2.2 allow remote attackers to establish sessions via a crafted message that leverages (1) a signature-validation bypass for SAML messages containing unsigned elements, (2) incorrect validation of XML messages, or (3) a certificate-chain validation bypass for an XML signature element that contains the signing certificate. IBM Tivoli Federated Identity Manager is prone to a signature-verification security-bypass vulnerability. An attacker can exploit this issue to bypass the signature validation mechanism through an untrusted or invalid XML signature. Tivoli Federated Identity Manager 6.1, 6.2, 6.2.1, and 6.2.2 are vulnerable. The product provides web and federated single sign-on (SSO) capabilities to users across multiple applications. ---------------------------------------------------------------------- The final version of the CSI 6.0 has been released. Find out why this is not just another Patch Management solution: http://secunia.com/blog/325/ ---------------------------------------------------------------------- TITLE: Tivoli Federated Identity Manager XML Signature Validation Bypass SECUNIA ADVISORY ID: SA50758 VERIFY ADVISORY: Secunia.com http://secunia.com/advisories/50758/ Customer Area (Credentials Required) https://ca.secunia.com/?page=viewadvisory&vuln_id=50758 RELEASE DATE: 2012-10-01 DISCUSS ADVISORY: http://secunia.com/advisories/50758/#comments AVAILABLE ON SITE AND IN CUSTOMER AREA: * Last Update * Popularity * Comments * Criticality Level * Impact * Where * Solution Status * Operating System / Software * CVE Reference(s) http://secunia.com/advisories/50758/ ONLY AVAILABLE IN CUSTOMER AREA: * Authentication Level * Report Reliability * Secunia PoC * Secunia Analysis * Systems Affected * Approve Distribution * Remediation Status * Secunia CVSS Score * CVSS https://ca.secunia.com/?page=viewadvisory&vuln_id=50758 ONLY AVAILABLE WITH SECUNIA CSI AND SECUNIA PSI: * AUTOMATED SCANNING http://secunia.com/vulnerability_scanning/personal/ http://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/ DESCRIPTION: A vulnerability has been reported in Tivoli Federated Identity Manager, which can be exploited by malicious people to bypass certain security restrictions. The vulnerability is reported in versions 6.1, 6.2, 6.2.1, and 6.2.2. SOLUTION: Apply patches (please see the vendor's advisory for details). PROVIDED AND/OR DISCOVERED BY: Reported by the vendor. ORIGINAL ADVISORY: IBM (IV23448, IV23445, IV23442, IV23435): http://www.ibm.com/support/docview.wss?uid=swg21612612 http://www.ibm.com/support/docview.wss?uid=swg24032923 http://www.ibm.com/support/docview.wss?uid=swg24032920 http://www.ibm.com/support/docview.wss?uid=swg24032922 http://www.ibm.com/support/docview.wss?uid=swg24032786 OTHER REFERENCES: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/ DEEP LINKS: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/ EXTENDED DESCRIPTION: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/ EXTENDED SOLUTION: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/ EXPLOIT: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/ ---------------------------------------------------------------------- About: This Advisory was delivered by Secunia as a free service to help private users keeping their systems up to date against the latest vulnerabilities. Subscribe: http://secunia.com/advisories/secunia_security_advisories/ Definitions: (Criticality, Where etc.) http://secunia.com/advisories/about_secunia_advisories/ Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor. ---------------------------------------------------------------------- Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org ----------------------------------------------------------------------

Trust: 2.07

sources: NVD: CVE-2012-3314 // JVNDB: JVNDB-2012-004720 // BID: 55732 // VULHUB: VHN-56595 // PACKETSTORM: 117020

AFFECTED PRODUCTS

vendor:ibmmodel:tivoli federated identity manager business gatewayscope:eqversion:6.2.1

Trust: 2.7

vendor:ibmmodel:tivoli federated identity managerscope:eqversion:6.1.1

Trust: 2.4

vendor:ibmmodel:tivoli federated identity managerscope:eqversion:6.2.0

Trust: 2.4

vendor:ibmmodel:tivoli federated identity managerscope:eqversion:6.2.1

Trust: 2.4

vendor:ibmmodel:tivoli federated identity managerscope:eqversion:6.2.2

Trust: 2.4

vendor:ibmmodel:tivoli federated identity manager business gatewayscope:eqversion:6.1.1

Trust: 2.4

vendor:ibmmodel:tivoli federated identity manager business gatewayscope:eqversion:6.2.0

Trust: 2.4

vendor:ibmmodel:tivoli federated identity manager business gatewayscope:eqversion:6.2.2

Trust: 2.4

vendor:ibmmodel:tivoli federated identity manager business gatewayscope:eqversion:6.2

Trust: 0.3

vendor:ibmmodel:tivoli federated identity managerscope:eqversion:6.2

Trust: 0.3

sources: BID: 55732 // JVNDB: JVNDB-2012-004720 // CNNVD: CNNVD-201210-023 // NVD: CVE-2012-3314

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2012-3314
value: MEDIUM

Trust: 1.0

NVD: CVE-2012-3314
value: MEDIUM

Trust: 0.8

CNNVD: CNNVD-201210-023
value: MEDIUM

Trust: 0.6

VULHUB: VHN-56595
value: MEDIUM

Trust: 0.1

nvd@nist.gov: CVE-2012-3314
severity: MEDIUM
baseScore: 5.8
vectorString: AV:N/AC:M/AU:N/C:P/I:P/A:N
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: NONE
exploitabilityScore: 8.6
impactScore: 4.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.8

VULHUB: VHN-56595
severity: MEDIUM
baseScore: 5.8
vectorString: AV:N/AC:M/AU:N/C:P/I:P/A:N
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: NONE
exploitabilityScore: 8.6
impactScore: 4.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

sources: VULHUB: VHN-56595 // JVNDB: JVNDB-2012-004720 // CNNVD: CNNVD-201210-023 // NVD: CVE-2012-3314

PROBLEMTYPE DATA

problemtype:CWE-20

Trust: 1.9

sources: VULHUB: VHN-56595 // JVNDB: JVNDB-2012-004720 // NVD: CVE-2012-3314

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201210-023

TYPE

input validation

Trust: 0.6

sources: CNNVD: CNNVD-201210-023

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2012-004720

PATCH
title:1612612url:http://www-01.ibm.com/support/docview.wss?uid=swg21612612
Trust: 0.8
sources:
            
            
            JVNDB: JVNDB-2012-004720

EXTERNAL IDS
db:NVDid:CVE-2012-3314
Trust: 2.8
db:BIDid:55732
Trust: 1.4
db:JVNDBid:JVNDB-2012-004720
Trust: 0.8
db:CNNVDid:CNNVD-201210-023
Trust: 0.7
db:SECUNIAid:50758
Trust: 0.7
db:AIXAPARid:IV23445
Trust: 0.6
db:AIXAPARid:IV23448
Trust: 0.6
db:AIXAPARid:IV23435
Trust: 0.6
db:AIXAPARid:IV23442
Trust: 0.6
db:VULHUBid:VHN-56595
Trust: 0.1
db:PACKETSTORMid:117020
Trust: 0.1
sources:
            
            
            VULHUB: VHN-56595 // 
            
            
            
            BID: 55732 // 
            
            
            
            JVNDB: JVNDB-2012-004720 // 
            
            
            
            PACKETSTORM: 117020 // 
            
            
            
            CNNVD: CNNVD-201210-023 // 
            
            
            
            NVD: CVE-2012-3314

REFERENCES
url:http://www-01.ibm.com/support/docview.wss?uid=swg21612612
Trust: 2.0
url:http://www-01.ibm.com/support/docview.wss?uid=swg1iv23435
Trust: 1.7
url:http://www-01.ibm.com/support/docview.wss?uid=swg1iv23442
Trust: 1.7
url:http://www-01.ibm.com/support/docview.wss?uid=swg1iv23445
Trust: 1.7
url:http://www-01.ibm.com/support/docview.wss?uid=swg1iv23448
Trust: 1.7
url:http://www.securityfocus.com/bid/55732
Trust: 1.1
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2012-3314
Trust: 0.8
url:http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2012-3314
Trust: 0.8
url:http://secunia.com/advisories/50758
Trust: 0.6
url:http://www.ibm.com
Trust: 0.3
url:http://www-01.ibm.com/support/docview.wss?uid=swg24032923
Trust: 0.3
url:http://www-01.ibm.com/support/docview.wss?uid=swg24032920
Trust: 0.3
url:http://www-01.ibm.com/support/docview.wss?uid=swg24032922
Trust: 0.3
url:http://www-01.ibm.com/support/docview.wss?uid=swg24032786
Trust: 0.3
url:http://secunia.com/advisories/50758/#comments
Trust: 0.1
url:http://www.ibm.com/support/docview.wss?uid=swg24032923
Trust: 0.1
url:http://www.ibm.com/support/docview.wss?uid=swg21612612
Trust: 0.1
url:http://www.ibm.com/support/docview.wss?uid=swg24032922
Trust: 0.1
url:http://www.ibm.com/support/docview.wss?uid=swg24032786
Trust: 0.1
url:http://www.ibm.com/support/docview.wss?uid=swg24032920
Trust: 0.1
url:http://secunia.com/vulnerability_intelligence/
Trust: 0.1
url:http://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/
Trust: 0.1
url:http://secunia.com/advisories/secunia_security_advisories/
Trust: 0.1
url:http://secunia.com/vulnerability_scanning/personal/
Trust: 0.1
url:http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org
Trust: 0.1
url:http://secunia.com/blog/325/
Trust: 0.1
url:http://secunia.com/advisories/50758/
Trust: 0.1
url:https://ca.secunia.com/?page=viewadvisory&vuln_id=50758
Trust: 0.1
url:http://secunia.com/advisories/about_secunia_advisories/
Trust: 0.1
sources:
            
            
            VULHUB: VHN-56595 // 
            
            
            
            BID: 55732 // 
            
            
            
            JVNDB: JVNDB-2012-004720 // 
            
            
            
            PACKETSTORM: 117020 // 
            
            
            
            CNNVD: CNNVD-201210-023 // 
            
            
            
            NVD: CVE-2012-3314

CREDITS
Reported by the vendor
Trust: 0.3
sources:
            
            
            BID: 55732

SOURCES
db:VULHUBid:VHN-56595
db:BIDid:55732
db:JVNDBid:JVNDB-2012-004720
db:PACKETSTORMid:117020
db:CNNVDid:CNNVD-201210-023
db:NVDid:CVE-2012-3314

LAST UPDATE DATE
2024-11-23T23:10:01.218000+00:00

SOURCES UPDATE DATE
db:VULHUBid:VHN-56595date:2013-02-01T00:00:00
db:BIDid:55732date:2012-10-01T00:00:00
db:JVNDBid:JVNDB-2012-004720date:2012-10-04T00:00:00
db:CNNVDid:CNNVD-201210-023date:2012-10-10T00:00:00
db:NVDid:CVE-2012-3314date:2024-11-21T01:40:37.850

SOURCES RELEASE DATE
db:VULHUBid:VHN-56595date:2012-10-02T00:00:00
db:BIDid:55732date:2012-10-01T00:00:00
db:JVNDBid:JVNDB-2012-004720date:2012-10-04T00:00:00
db:PACKETSTORMid:117020date:2012-10-01T01:49:35
db:CNNVDid:CNNVD-201210-023date:2012-10-10T00:00:00
db:NVDid:CVE-2012-3314date:2012-10-02T21:55:01.333