CVE-2013-5429
Severity Score
2.1
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
The Risk Based Access functionality in IBM Tivoli Federated Identity Manager (TFIM) 6.2.2 before FP9 and Tivoli Federated Identity Manager Business Gateway (TFIMBG) 6.2.2 before FP9 does not prevent reuse of One Time Password (OTP) tokens, which makes it easier for remote authenticated users to complete transactions by leveraging access to an already-used token.
La funcionalidad de Acceso Basado en el Riesgo de IBM Tivoli Federated Identity Manager (TFIM) 6.2.2 antes de FP9 y Tivoli Federated Identity Manager Business Gateway (TFIMBG) 6.2.2 antes de FP9 no impide la reutilización de One Time Password (OTP) tokens, lo que hace más fácil para los usuarios remotos autenticados para completar las transacciones mediante el aprovechamiento de acceso a un símbolo usado ya.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2013-08-22 CVE Reserved
- 2014-01-21 CVE Published
- 2023-03-07 EPSS Updated
- 2024-08-06 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-287: Improper Authentication
CAPEC
References (4)
| URL | Tag | Source |
|---|---|---|
| https://exchange.xforce.ibmcloud.com/vulnerabilities/87561 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://www-01.ibm.com/support/docview.wss?uid=swg1IV52624 | 2017-08-29 | |
| http://www-01.ibm.com/support/docview.wss?uid=swg21660509 | 2017-08-29 | |
| http://www-01.ibm.com/support/docview.wss?uid=swg21660510 | 2017-08-29 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Ibm Search vendor "Ibm" | Tivoli Federated Identity Manager Search vendor "Ibm" for product "Tivoli Federated Identity Manager" | 6.2.2 Search vendor "Ibm" for product "Tivoli Federated Identity Manager" and version "6.2.2" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Tivoli Federated Identity Manager Search vendor "Ibm" for product "Tivoli Federated Identity Manager" | 6.2.2.1 Search vendor "Ibm" for product "Tivoli Federated Identity Manager" and version "6.2.2.1" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Tivoli Federated Identity Manager Search vendor "Ibm" for product "Tivoli Federated Identity Manager" | 6.2.2.2 Search vendor "Ibm" for product "Tivoli Federated Identity Manager" and version "6.2.2.2" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Tivoli Federated Identity Manager Search vendor "Ibm" for product "Tivoli Federated Identity Manager" | 6.2.2.3 Search vendor "Ibm" for product "Tivoli Federated Identity Manager" and version "6.2.2.3" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Tivoli Federated Identity Manager Search vendor "Ibm" for product "Tivoli Federated Identity Manager" | 6.2.2.4 Search vendor "Ibm" for product "Tivoli Federated Identity Manager" and version "6.2.2.4" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Tivoli Federated Identity Manager Search vendor "Ibm" for product "Tivoli Federated Identity Manager" | 6.2.2.5 Search vendor "Ibm" for product "Tivoli Federated Identity Manager" and version "6.2.2.5" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Tivoli Federated Identity Manager Search vendor "Ibm" for product "Tivoli Federated Identity Manager" | 6.2.2.6 Search vendor "Ibm" for product "Tivoli Federated Identity Manager" and version "6.2.2.6" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Tivoli Federated Identity Manager Search vendor "Ibm" for product "Tivoli Federated Identity Manager" | 6.2.2.7 Search vendor "Ibm" for product "Tivoli Federated Identity Manager" and version "6.2.2.7" | - |
Affected
| ||||||
| Ibm Search vendor "Ibm" | Tivoli Federated Identity Manager Search vendor "Ibm" for product "Tivoli Federated Identity Manager" | 6.2.2.8 Search vendor "Ibm" for product "Tivoli Federated Identity Manager" and version "6.2.2.8" | - |
Affected
| ||||||