Vulnerabilities in IBM Tivoli Federated Identity Manager