CVE-2014-3097 Information

Description

Open redirect vulnerability in IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0-TIV-TFIM-IF0015 6.2.1 before 6.2.1-TIV-TFIM-IF0007 and 6.2.2 before 6.2.2-TIV-TFIM-IF0011 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

Reference

http://www-01.ibm.com/support/docview.wss?uid=swg1IV64324 http://www-01.ibm.com/support/docview.wss?uid=swg1IV64325 http://www-01.ibm.com/support/docview.wss?uid=swg1IV64349 http://www-01.ibm.com/support/docview.wss?uid=swg1IV64376 http://www-01.ibm.com/support/docview.wss?uid=swg1IV64494 http://www-01.ibm.com/support/docview.wss?uid=swg1IV64497 http://www-01.ibm.com/support/docview.wss?uid=swg1IV64501 http://www-01.ibm.com/support/docview.wss?uid=swg1IV64506 http://www-01.ibm.com/support/docview.wss?uid=swg1IV64509 http://www-01.ibm.com/support/docview.wss?uid=swg1IV64511 http://www-01.ibm.com/support/docview.wss?uid=swg1IV64512 http://www-01.ibm.com/support/docview.wss?uid=swg21684852 https://exchange.xforce.ibmcloud.com/vulnerabilities/94265