Vulnerability in Ibm Tivoli_federated_identity_manager

CVE-2014-3097

Open redirect vulnerability in IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0-TIV-TFIM-IF0015, 6.2.1 before 6.2.1-TIV-TFIM-IF0007, and 6.2.2 before 6.2.2-TIV-TFIM-IF0011 allows remote attackers to redirect users to arbitra…

EPSS: 0.007 (71.8th percentile) — read the EPSS interpretation.

Affected products

References

  • IV64511 (vendor-advisory, x_refsource_AIXAPAR)
  • IV64349 (vendor-advisory, x_refsource_AIXAPAR)
  • IV64512 (vendor-advisory, x_refsource_AIXAPAR)
  • psirt@us.ibm.com (x_refsource_CONFIRM, Patch, Vendor Advisory)
  • IV64376 (vendor-advisory, x_refsource_AIXAPAR)
  • IV64509 (vendor-advisory, x_refsource_AIXAPAR)
  • IV64324 (vendor-advisory, x_refsource_AIXAPAR)
  • IV64497 (vendor-advisory, x_refsource_AIXAPAR)
  • IV64501 (vendor-advisory, x_refsource_AIXAPAR)
  • IV64506 (vendor-advisory, x_refsource_AIXAPAR)