CVE-2013-0582: XSS
Cross-site scripting (XSS) vulnerability in IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.12, 6.2.1 before 6.2.1.5, and 6.2.2 before 6.2.2.4 and Tivoli Federated Identity Manager Business Gateway (TFIMBG) 6.2.0 before 6.2.0.12 and 6.2.1 before 6.2.1.5 allows remote attackers to inject arbitrary web script or HTML via a crafted URL that triggers a SAML 2.0 response.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-0582?
CVE-2013-0582 is classified as a medium severity Cross-Site Scripting (XSS) vulnerability.
How do I fix CVE-2013-0582?
To mitigate CVE-2013-0582, update IBM Tivoli Federated Identity Manager to version 6.2.0.12, 6.2.1.5, or 6.2.2.4 or later.
Which versions of IBM Tivoli Federated Identity Manager are affected by CVE-2013-0582?
CVE-2013-0582 affects versions 6.2.0 through 6.2.0.11, 6.2.1 through 6.2.1.4, and 6.2.2 through 6.2.2.3 of IBM Tivoli Federated Identity Manager.
What type of vulnerability is CVE-2013-0582?
CVE-2013-0582 is a Cross-Site Scripting (XSS) vulnerability that allows attackers to inject malicious scripts.
Who is at risk from CVE-2013-0582?
Organizations using affected versions of IBM Tivoli Federated Identity Manager are at risk of exploitation through CVE-2013-0582.