CVE-2023-0339

Опубликовано: 28 фев. 2023

Источник: nvd

CVSS3: 9.1

CVSS3: 9.8

EPSS Низкий

Описание

Relative Path Traversal vulnerability in ForgeRock Access Management Web Policy Agent allows Authentication Bypass. This issue affects Access Management Web Policy Agent: all versions up to 5.10.1

Ссылки

https://backstage.forgerock.com/downloads/browse/am/featured/web-agents
Product
https://backstage.forgerock.com/knowledge/kb/article/a21576868
Mitigation
Release Notes
Vendor Advisory
https://backstage.forgerock.com/downloads/browse/am/featured/web-agents
Product
https://backstage.forgerock.com/knowledge/kb/article/a21576868
Mitigation
Release Notes
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:forgerock:web_policy_agents:*:*:*:*:*:*:*:*

Версия до 5.10.1 (включая)

EPSS

Процентиль: 38%

0.00163

Низкий

9.1 Critical

CVSS3

9.8 Critical

CVSS3

Дефекты

CWE-23

CWE-22

Связанные уязвимости

GHSA-f9v2-3453-rj68

CVSS3: 9.8

github

почти 3 года назад

Relative Path Traversal vulnerability in ForgeRock Access Management Web Policy Agent allows Authentication Bypass.This issue affects Access Management Web Policy Agent: through 5.10.1.

EPSS

Процентиль: 38%

0.00163

Низкий

9.1 Critical

CVSS3

9.8 Critical

CVSS3

Дефекты

CWE-23

CWE-22