Lucene search

K
nvd[email protected]NVD:CVE-2013-5431
HistoryNov 01, 2013 - 2:55 a.m.

CVE-2013-5431

2013-11-0102:55:04
CWE-20
web.nvd.nist.gov

5.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

6.5 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

67.9%

Open redirect vulnerability in IBM Tivoli Federated Identity Manager (TFIM) 6.1.1 before IF 15, 6.2.0 before IF 14, 6.2.1, and 6.2.2 before IF 8 and Tivoli Federated Identity Manager Business Gateway (TFIMBG) 6.1.1 before IF 15, 6.2.0 before IF 14, 6.2.1, and 6.2.2 before IF 8 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

Affected configurations

NVD
Node
ibmtivoli_federated_identity_managerMatch6.1.1
OR
ibmtivoli_federated_identity_managerMatch6.2.0
OR
ibmtivoli_federated_identity_managerMatch6.2.1
OR
ibmtivoli_federated_identity_managerMatch6.2.2
Node
ibmtivoli_federated_identity_manager_business_gatewayMatch6.1.1
OR
ibmtivoli_federated_identity_manager_business_gatewayMatch6.2.0
OR
ibmtivoli_federated_identity_manager_business_gatewayMatch6.2.1
OR
ibmtivoli_federated_identity_manager_business_gatewayMatch6.2.2

5.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

6.5 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

67.9%

Related for NVD:CVE-2013-5431