CVE-2023-0511

Опубликовано: 28 фев. 2023

Источник: nvd

CVSS3: 9.1

CVSS3: 9.8

EPSS Низкий

Описание

Relative Path Traversal vulnerability in ForgeRock Access Management Java Policy Agent allows Authentication Bypass. This issue affects Access Management Java Policy Agent: all versions up to 5.10.1

Ссылки

https://backstage.forgerock.com/downloads/browse/am/featured/java-agents
Product
https://backstage.forgerock.com/knowledge/kb/article/a21576868
Release Notes
Vendor Advisory
https://backstage.forgerock.com/downloads/browse/am/featured/java-agents
Product
https://backstage.forgerock.com/knowledge/kb/article/a21576868
Release Notes
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:forgerock:java_policy_agents:*:*:*:*:*:*:*:*

Версия до 5.10.1 (включая)

EPSS

Процентиль: 31%

0.00115

Низкий

9.1 Critical

CVSS3

9.8 Critical

CVSS3

Дефекты

CWE-23

CWE-22

Связанные уязвимости

GHSA-v5cp-f652-48w9

CVSS3: 9.8

github

почти 3 года назад

Relative Path Traversal vulnerability in ForgeRock Access Management Java Policy Agent allows Authentication Bypass.This issue affects Access Management Java Policy Agent: from 1.0.0 through 5.10.1.

EPSS

Процентиль: 31%

0.00115

Низкий

9.1 Critical

CVSS3

9.8 Critical

CVSS3

Дефекты

CWE-23

CWE-22