NetSight
IP …
medium5.8

CVE-2013-5431

Open redirect vulnerability in IBM Tivoli Federated Identity Manager (TFIM) 6.1.1 before IF 15, 6.2.0 before IF 14, 6.2.1, and 6.2.2 before IF 8 and Tivoli Fed…

Impact

Open redirect vulnerability in IBM Tivoli Federated Identity Manager (TFIM) 6.1.1 before IF 15, 6.2.0 before IF 14, 6.2.1, and 6.2.2 before IF 8 and Tivoli Federated Identity Manager Business Gateway (TFIMBG) 6.1.1 before IF 15, 6.2.0 before IF 14, 6.2.1, and 6.2.2 before IF 8 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

Affected products

VendorProductAffected versions
IbmTivoli Federated Identity Manager
Versions 6.1.1, 6.2.0, 6.2.1, 6.2.2
IbmTivoli Federated Identity Manager Business Gateway
Versions 6.1.1, 6.2.0, 6.2.1, 6.2.2

Weakness classification

CWE-20

References