Vulnerability Bulletins |
IBM Security Bulletin: A cross-site scripting vulnerability has been identified in IBM Tivoli Federated Identity Manager (CVE-2015-4959) |
|
| Affected software | IBM |
|
IBM Tivoli Federated Identity Manager is vulnerable to cross-site scripting attacks that could be used to steal the victims authentication credentials. CVE(s): CVE-2015-4959Affected product(s) and affected version(s):IBM Tivoli Federated Identity Manager 6.2.2 Refer to the following reference URLs for remediation and additional vulnerability details:Source Bulletin: http://www.ibm.com/support/docview.wss?uid=swg21974157X-Force Database: http://exchange.xforce.ibmcloud.com/vulnerabilities/105255 More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_a_cross_site_scripting_vulnerability_has_been_identified_in_ibm_tivoli_federated_identity_manager_cve_2015_4959?lang=en_us |
|