Improper input validation in Forgerock Openam
CVE-2014-7246
The Core Server in OpenAM 9.5.3 through 9.5.5, 10.0.0 through 10.0.2, 10.1.0-Xpress, and 11.0.0 through 11.0.2, when deployed on a multi-server network, allows remote authenticated users to cause a denial of service (infinite loop) via a c…
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.011 (60.6th percentile) — read the EPSS interpretation.
Affected products
- Forgerock Openam — versions 9.5.3, 9.5.4, 9.5.5
- N/a — versions n/a
Weakness classification (CWE)
References
- vultures@jpcert.or.jp (x_refsource_CONFIRM, Patch, Vendor Advisory)
- vultures@jpcert.or.jp (x_refsource_JVNDB, third-party-advisory)
- vultures@jpcert.or.jp (x_refsource_JVN, third-party-advisory)
- vultures@jpcert.or.jp (x_refsource_CONFIRM, Vendor Advisory)