IBM Security Identity Manager open redirection vulnerability

IBM Security Identity Manager (ISIM) is a suite of identity management and governance solutions from IBM of America. The solution automates the creation, modification, re-authentication and termination of user privileges throughout the user lifecycle and supports policy-based password management. IBM Security Identity Manager versions 6.0.0 and 6.0.2 contain an open redirection vulnerability that stems from the system’s failure to reasonably handle target hops, which can be exploited by an attacker to An attacker could exploit the vulnerability to redirect users to a malicious website that appears to be trusted.