IBM Tivoli Integrated Portal, IBM Tivoli Federated Identity Manager

ソフト名：IBM Tivoli Integrated Portal 1.1.1.15未満, IBM Tivoli Federated Identity Manager/Federated Identity Manager Business Gateway 6.2.0 Fix Pack 9未満 (Sun JAVA)

回避策：eWAS version 6.1.0.39, TIP version 1.1.1.15へのアップデートにて対応, IV03048, IV03050, IV03074, アップデートにて対応

脆弱性：DoS攻撃, 無限ループ, 不明なエラー

ソース：

https://www.ibm.com/developerworks/mydeveloperworks/groups/service/

http://www-01.ibm.com/software/tivoli/products/federated-identity-mgr/

http://www-01.ibm.com/software/tivoli/products/federated-identity-mgr-bg/

html/communityview?communityUuid=26d4aa47-4fd6-460d-a93b-3ee8945324d6

http://www.ibm.com/support/docview.wss?uid=swg21508061

http://www.ibm.com/support/docview.wss?uid=swg24029497

http://www.ibm.com/support/docview.wss?uid=swg24029498

http://secunia.com/advisories/43262/

http://secunia.com/advisories/43295/

http://secunia.com/advisories/45555/

http://secunia.com/advisories/45556/

http://dvw-j.blogspot.com/2011/02/sun-java-ibm-java-ibm-websphere.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4476

CVE：CVE-2010-4476

危険性：Medium Risk