Lucene search

K
cve[email protected]CVE-2013-5431
HistoryNov 01, 2013 - 2:55 a.m.

CVE-2013-5431

2013-11-0102:55:04
CWE-20
web.nvd.nist.gov
22
cve-2013-5431
open redirect
ibm
tivoli federated identity manager
tfim
tfimbg
remote attackers
phishing
vulnerability

5.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

6.7 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

68.0%

Open redirect vulnerability in IBM Tivoli Federated Identity Manager (TFIM) 6.1.1 before IF 15, 6.2.0 before IF 14, 6.2.1, and 6.2.2 before IF 8 and Tivoli Federated Identity Manager Business Gateway (TFIMBG) 6.1.1 before IF 15, 6.2.0 before IF 14, 6.2.1, and 6.2.2 before IF 8 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

Affected configurations

NVD
Node
ibmtivoli_federated_identity_managerMatch6.1.1
OR
ibmtivoli_federated_identity_managerMatch6.2.0
OR
ibmtivoli_federated_identity_managerMatch6.2.1
OR
ibmtivoli_federated_identity_managerMatch6.2.2
Node
ibmtivoli_federated_identity_manager_business_gatewayMatch6.1.1
OR
ibmtivoli_federated_identity_manager_business_gatewayMatch6.2.0
OR
ibmtivoli_federated_identity_manager_business_gatewayMatch6.2.1
OR
ibmtivoli_federated_identity_manager_business_gatewayMatch6.2.2

5.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

6.7 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

68.0%

Related for CVE-2013-5431