Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 18 Oct 2026 16:12:17 +0000 certa-2011-avi-710 — Une vulnérabilité présente dans IBM Tivoli Federated Identity Manager permet de contourner la politique de sécurité. https://cve.radiocsirt.org/vuln/certa-2011-avi-710 certa-2011-avi-710 https://cve.radiocsirt.org/vuln/certa-2011-avi-710 EUVD-2026-114689 https://cve.radiocsirt.org/vuln/euvd-2026-114689 EUVD-2026-114689 https://cve.radiocsirt.org/vuln/euvd-2026-114689 fkie_cve-2011-1386 https://cve.radiocsirt.org/vuln/fkie_cve-2011-1386 <p>IBM Tivoli Federated Identity Manager (TFIM) and Tivoli Federated Identity Manager Business Gateway (TFIMBG) 6.1.1, 6.2.0, and 6.2.1 do not properly handle signature validations based on SAML 1.0, 1.1, and 2.0, which allows remote attackers to bypass intended authentication or authorization requirements via a non-conforming SAML signature.</p> <p>IBM Tivoli Federated Identity Manager (TFIM) and Tivoli Federated Identity Manager Business Gateway (TFIMBG) 6.1.1, 6.2.0, and 6.2.1 do not properly handle signature validations based on SAML 1.0, 1.1, and 2.0, which allows remote attackers to bypass intended authentication or authorization requirements via a non-conforming SAML signature.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2011-1386 GHSA-339v-wcxr-4xwf https://cve.radiocsirt.org/vuln/ghsa-339v-wcxr-4xwf <p>IBM Tivoli Federated Identity Manager (TFIM) and Tivoli Federated Identity Manager Business Gateway (TFIMBG) 6.1.1, 6.2.0, and 6.2.1 do not properly handle signature validations based on SAML 1.0, 1.1, and 2.0, which allows remote attackers to bypass intended authentication or authorization requirements via a non-conforming SAML signature.</p> <p>IBM Tivoli Federated Identity Manager (TFIM) and Tivoli Federated Identity Manager Business Gateway (TFIMBG) 6.1.1, 6.2.0, and 6.2.1 do not properly handle signature validations based on SAML 1.0, 1.1, and 2.0, which allows remote attackers to bypass intended authentication or authorization requirements via a non-conforming SAML signature.</p> https://cve.radiocsirt.org/vuln/ghsa-339v-wcxr-4xwf gsd-2011-1386 https://cve.radiocsirt.org/vuln/gsd-2011-1386 gsd-2011-1386 https://cve.radiocsirt.org/vuln/gsd-2011-1386