CVE-2013-5429 | BDVDB-2026-59521 Detail

Description#

The Risk Based Access functionality in IBM Tivoli Federated Identity Manager (TFIM) 6.2.2 before FP9 and Tivoli Federated Identity Manager Business Gateway (TFIMBG) 6.2.2 before FP9 does not prevent reuse of One Time Password (OTP) tokens, which makes it easier for remote authenticated users to complete transactions by leveraging access to an already-used token.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www-01.ibm.com/support/docview.wss?uid=swg21660510
http://www-01.ibm.com/support/docview.wss?uid=swg21660509
http://www-01.ibm.com/support/docview.wss?uid=swg1IV52624
https://exchange.xforce.ibmcloud.com/vulnerabilities/87561

Exploit#

No public exploit known

History#

Version 12014-01-21Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.