ByteOS Network

NVD Vulnerability Details :

CVE-2017-1319

Deferred

Source-psirt@us.ibm.com

Published At-08 Jun, 2017 | 21:29

Updated At-20 Apr, 2025 | 01:37

IBM Tivoli Federated Identity Manager 6.2 is affected by a vulnerability due to a missing secure attribute in encrypted session (SSL) cookie. IBM X-Force ID: 125731.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.0	7.5	HIGH	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Primary	2.0	5.0	MEDIUM	AV:N/AC:L/Au:N/C:P/I:N/A:N

CPE Matches

IBM Corporation

>>tivoli_federated_identity_manager>>6.2.0

cpe:2.3:a:ibm:tivoli_federated_identity_manager:6.2.0:*:*:*:*:*:*:*

IBM Corporation

>>tivoli_federated_identity_manager>>6.2.1

cpe:2.3:a:ibm:tivoli_federated_identity_manager:6.2.1:*:*:*:*:*:*:*

IBM Corporation

>>tivoli_federated_identity_manager>>6.2.2

cpe:2.3:a:ibm:tivoli_federated_identity_manager:6.2.2:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-326	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
http://www-01.ibm.com/support/docview.wss?uid=swg22002871	psirt@us.ibm.com	Patch Vendor Advisory
http://www.securitytracker.com/id/1038504	psirt@us.ibm.com	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/125731	psirt@us.ibm.com	VDB Entry Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg22002871	af854a3a-2127-422b-91ae-364da2661108	Patch Vendor Advisory
http://www.securitytracker.com/id/1038504	af854a3a-2127-422b-91ae-364da2661108	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/125731	af854a3a-2127-422b-91ae-364da2661108	VDB Entry Vendor Advisory

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History