Show filters
14 Total Results
Displaying 11-14 of 14
Sort by:
Attacker Value
Unknown
CVE-2018-0696
Disclosure Date: February 13, 2019 (last updated November 27, 2024)
OpenAM (Open Source Edition) 13.0 and later does not properly manage sessions, which allows remote authenticated attackers to change the security questions and reset the login password via unspecified vectors.
0
Attacker Value
Unknown
CVE-2017-10873
Disclosure Date: November 02, 2017 (last updated November 26, 2024)
OpenAM (Open Source Edition) allows an attacker to bypass authentication and access unauthorized contents via unspecified vectors. Note that this vulnerability affects OpenAM (Open Source Edition) implementations configured as SAML 2.0IdP, and switches authentication methods based on AuthnContext requests sent from the service provider.
0
Attacker Value
Unknown
CVE-2016-10097
Disclosure Date: January 02, 2017 (last updated November 25, 2024)
XML External Entity (XXE) Vulnerability in /SSOPOST/metaAlias/%realm%/idpv2 in OpenAM - Access Management 10.1.0 allows remote attackers to read arbitrary files via the SAMLRequest parameter.
0
Attacker Value
Unknown
CVE-2014-7246
Disclosure Date: November 14, 2014 (last updated October 05, 2023)
The Core Server in OpenAM 9.5.3 through 9.5.5, 10.0.0 through 10.0.2, 10.1.0-Xpress, and 11.0.0 through 11.0.2, when deployed on a multi-server network, allows remote authenticated users to cause a denial of service (infinite loop) via a crafted cookie in a request.
0
