CVE-2013-5429

no score yetEPSS 0.9%

The Risk Based Access functionality in IBM Tivoli Federated Identity Manager (TFIM) 6.2.2 before FP9 and Tivoli Federated Identity Manager Business Gateway (TFIMBG) 6.2.2 before FP9 does not prevent reuse of One Time Password (OTP) tokens, which makes it easier for remote authenticated users to complete transactions by leveraging access to an already-used token.

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 59% of CVEs (scores of 2026-10-31)
CWE: CWE-287
Published: 2014-01-21
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

ibm:tivoli_federated_identity_manager

References

http://www-01.ibm.com/support/docview.wss?uid=swg1IV52624
http://www-01.ibm.com/support/docview.wss?uid=swg21660509
http://www-01.ibm.com/support/docview.wss?uid=swg21660510
https://exchange.xforce.ibmcloud.com/vulnerabilities/87561
http://www-01.ibm.com/support/docview.wss?uid=swg1IV52624

Check your stack JSON