CVE-2009-5085

no score yetEPSS 1.1%

ibm tivoli federated identity manager: no CVSS score yet. EPSS 1.1% chance of exploitation in the next 30 days.

IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.2, when configured as an OpenID provider, does not delete the site information cookie in response to a user's deletion of a relying-party trust entry, which allows user-assisted remote attackers to bypass intended trust restrictions via vectors that trigger absence of the consent-to-authenticate page.

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 66% of CVEs (scores of 2026-10-31)
CWE: CWE-264
Published: 2011-08-12
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

ibm:tivoli_federated_identity_manager

References

http://www-01.ibm.com/support/docview.wss?uid=swg1IZ44555
http://www.ibm.com/support/docview.wss?uid=swg24029497
http://www-01.ibm.com/support/docview.wss?uid=swg1IZ44555
http://www.ibm.com/support/docview.wss?uid=swg24029497

Check your stack JSON