Description
Open redirect vulnerability in IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0-TIV-TFIM-IF0015, 6.2.1 before 6.2.1-TIV-TFIM-IF0007, and 6.2.2 before 6.2.2-TIV-TFIM-IF0011 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.
References
- IV64511 vendor-advisory
- IV64349 vendor-advisory
- IV64512 vendor-advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21684852
- IV64376 vendor-advisory
- IV64509 vendor-advisory
- IV64324 vendor-advisory
- IV64497 vendor-advisory
- IV64501 vendor-advisory
- IV64506 vendor-advisory
- ibm-tfim-cve20143097-open-redirect(94265) vdb-entry
- IV64325 vendor-advisory
- IV64494 vendor-advisory