CVSS 9.8 · Critical EPSS 2,0%
Kerentanan Improper Access Control pada forgerock access management. Skor CVSS 3.1 9.8 (Critical) menurut NVD.
Missing access control in ForgeRock Access Management 7.1.0 and earlier versions on all platforms allows remote unauthenticated attackers to hijack sessions, including potentially admin-level sessions. This issue affects: ForgeRock Access Management 7.1 versions prior to 7.1.1; 6.5 versions prior to 6.5.4; all previous versions.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| forgerock | access management | Versi 5.5.2 |
| forgerock | access management | Versi 6.0.0 |
| forgerock | access management | Versi 6.0.0.1 |
| forgerock | access management | Versi 6.0.0.2 |
| forgerock | access management | Versi 6.0.0.3 |
| forgerock | access management | Versi 6.0.0.4 |
| forgerock | access management | Versi 6.0.0.6 |
| forgerock | access management | Versi 6.0.0.7 |
| forgerock | access management | Versi 6.5.0 |
| forgerock | access management | Versi 6.5.0.1 |
| forgerock | access management | Versi 6.5.0.2 |
| forgerock | access management | Versi 6.5.1 |
| forgerock | access management | Versi 6.5.2.1 |
| forgerock | access management | Versi 6.5.2.2 |
| forgerock | access management | Versi 6.5.2.3 |
| forgerock | access management | Versi 6.5.3 |
| forgerock | access management | Versi 7.0.0 |
| forgerock | access management | Versi 7.0.1 |
| forgerock | access management | Versi 7.0.2 |
| forgerock | access management | Versi 7.1.0 |