CVE-2010-2337: Open redirect vulnerability in RSA Federated Identity Manager 4.0 before 4.0.25 and 4.1 before 4.1.26 allow...

Security readout for executives and security teams

CVE-2010-2337 is an open redirect issue in RSA Federated Identity Manager. A remote attacker could redirect users from a trusted RSA FIM context to arbitrary websites, mainly enabling phishing. The bundle does not show code execution, data theft by itself, or active exploitation. Exposure is limited to organizations running RSA Federated Identity Manager 4.0 or 4.1 below the fixed versions. Internet-facing or user-facing federation flows increase business risk because users may trust the legitimate identity domain. Prioritize if RSA FIM is still in production or externally reachable. The issue mainly affects trust and phishing risk, not direct system compromise based on the provided evidence. Mitigation focus: Upgrade RSA FIM 4.0 to 4.0.25 or later.; Upgrade RSA FIM 4.1 to 4.1.26 or later.; Review RSA advisory guidance before applying changes..

Prepared

Jun 28, 2026, 02:01 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.