What is CVE-2021-4201?

CVE-2021-4201 is a critical-severity vulnerability in Forgerock Access Management, classified under Improper Access Control. CVSS score: 9.6/10. Published 2022-02-14.

How severe is CVE-2021-4201?

Critical severity. CVSS v3 base score is 9.6 out of 10.

Auth bypass in Forgerock Access Management

CVE-2021-4201

Missing access control in ForgeRock Access Management 7.1.0 and earlier versions on all platforms allows remote unauthenticated attackers to hijack sessions, including potentially admin-level sessions. This issue affects: ForgeRock Access…

EPSS: 0.019 (77.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.6 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H.

Affected products

Forgerock Access Management — versions 7.1, 6.5
Forgerock Access_management — versions 5.5.2, 6.0.0, 6.0.0.1

Weakness classification (CWE)

References

psirt@forgerock.com (Patch, Vendor Advisory)

Frequently asked questions

What is CVE-2021-4201?: CVE-2021-4201 is a critical-severity vulnerability in Forgerock Access Management, classified under Improper Access Control. CVSS score: 9.6/10. Published 2022-02-14.
How severe is CVE-2021-4201?: Critical severity. CVSS v3 base score is 9.6 out of 10.