CVE-2013-5431: IBM Tivoli Federated Identity Manager

Medium severity, CVSS 5.8. EPSS: 1.4% chance of exploitation in the next 30 days.

Open redirect vulnerability in IBM Tivoli Federated Identity Manager (TFIM) 6.1.1 before IF 15, 6.2.0 before IF 14, 6.2.1, and 6.2.2 before IF 8 and Tivoli Federated Identity Manager Business Gateway (TFIMBG) 6.1.1 before IF 15, 6.2.0 before IF 14, 6.2.1, and 6.2.2 before IF 8 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

Affected products

• IBM Tivoli Federated Identity Manager: version 6.1.1 only; version 6.2.0 only; version 6.2.1 only; version 6.2.2 only
• IBM Tivoli Federated Identity Manager Business Gateway: version 6.1.1 only; version 6.2.0 only; version 6.2.1 only; version 6.2.2 only

Published 2013-11-01. Last modified 2026-06-16.