# CVEs published 2012-11-08

6 CVEs were published on November 8, 2012: 0 critical, 0 high. Days are UTC.

- [CVE-2012-3315](https://cve.now/CVE-2012-3315.md): The Java servlets in the management console in IBM Tivoli Federated Identity Manager (TFIM) through 6.2.2 and Tivoli Federated Identity Mana (no CVSS)
- [CVE-2012-4020](https://cve.now/CVE-2012-4020.md): MosP kintai kanri before 4.1.0 does not enforce privilege requirements, which allows remote authenticated users to read other users' informa (no CVSS)
- [CVE-2012-4021](https://cve.now/CVE-2012-4021.md): MosP kintai kanri before 4.1.0 does not properly perform authentication, which allows remote authenticated users to impersonate arbitrary us (no CVSS)
- [CVE-2012-4022](https://cve.now/CVE-2012-4022.md): Pebble before 2.6.4 allows remote attackers to trigger loss of blog-entry viewability via a crafted comment. (no CVSS)
- [CVE-2012-4023](https://cve.now/CVE-2012-4023.md): CRLF injection vulnerability in Pebble before 2.6.4 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response split (no CVSS)
- [CVE-2012-5171](https://cve.now/CVE-2012-5171.md): Directory traversal vulnerability in Be Graph BeZIP before 3.10 allows remote attackers to create or overwrite arbitrary files via a crafted (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2012-11-08
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.