CVEvulnerability

CVE-2014-3097

4.3 MEDIUM Published 2014-10-02 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-10-02
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N

Description

Open redirect vulnerability in IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0-TIV-TFIM-IF0015, 6.2.1 before 6.2.1-TIV-TFIM-IF0007, and 6.2.2 before 6.2.2-TIV-TFIM-IF0011 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

Affected configurations

• ibm tivoli federated identity manager 6.2.0 • ibm tivoli federated identity manager 6.2.1 • ibm tivoli federated identity manager 6.2.2

References