CVE-2014-3097

published 2014-10-02

CVE-2014-3097: Open redirect vulnerability in IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0-TIV-TFIM-IF0015, 6.2.1 before 6.2.1-TIV-TFIM-IF0007, and 6.2.2…

medium 4.3 CVSS 3.1

AV N AC M Au N C N I P A N

Open redirect vulnerability in IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0-TIV-TFIM-IF0015, 6.2.1 before 6.2.1-TIV-TFIM-IF0007, and 6.2.2 before 6.2.2-TIV-TFIM-IF0011 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
ibm	tivoli_federated_identity_manager	—	—
ibm	tivoli_federated_identity_manager	—	—
ibm	tivoli_federated_identity_manager	—	—