5.8
CVE-2013-5431
- EPSS 1.36%
- Veröffentlicht 01.11.2013 02:55:04
- Zuletzt bearbeitet 29.04.2026 01:13:23
- Erkennungen
LoginOpen redirect vulnerability in IBM Tivoli Federated Identity Manager (TFIM) 6.1.1 before IF 15, 6.2.0 before IF 14, 6.2.1, and 6.2.2 before IF 8 and Tivoli Federated Identity Manager Business Gateway (TFIMBG) 6.1.1 before IF 15, 6.2.0 before IF 14, 6.2.1, and 6.2.2 before IF 8 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Ibm ≫ Tivoli Federated Identity Manager Version 6.1.1
Ibm ≫ Tivoli Federated Identity Manager Version 6.2.0
Ibm ≫ Tivoli Federated Identity Manager Version 6.2.1
Ibm ≫ Tivoli Federated Identity Manager Version 6.2.2
Ibm ≫ Tivoli Federated Identity Manager Business Gateway Version 6.1.1
Ibm ≫ Tivoli Federated Identity Manager Business Gateway Version 6.2.0
Ibm ≫ Tivoli Federated Identity Manager Business Gateway Version 6.2.1
Ibm ≫ Tivoli Federated Identity Manager Business Gateway Version 6.2.2
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.36% | 0.68 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 5.8 | 8.6 | 4.9 |
AV:N/AC:M/Au:N/C:P/I:P/A:N
|
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
http://www-01.ibm.com/support/docview.wss?uid=swg1IV50639
http://www-01.ibm.com/support/docview.wss?uid=swg21654114
http://www.kb.cert.org/vuls/id/596990
https://exchange.xforce.ibmcloud.com/vulnerabilities/87616