ГлавнаяУязвимости → CVE-2023-0582
8.1высокая

CVE-2023-0582

Описание

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ForgeRock Access Management allows Authorization Bypass. This issue affects access management: before 7.3.0, before 7.2.1, before 7.1.4, through 7.0.2.

Затрагиваемое ПО
Forgerock Access management
CVSS
Балл8.1 — высокая
ВекторCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Источники
https://backstage.forgerock.com/downloads/browse/am/featuredhttps://backstage.forgerock.com/knowledge/kb/article/a64088600https://backstage.forgerock.com/downloads/browse/am/featuredhttps://backstage.forgerock.com/knowledge/kb/article/a64088600