Skip to content
OpenAdvisories

Product · ForgeRock

Access Management

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.1
    CVE-2023-0582

    Path Traversal in ForgeRock Access Managment

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ForgeRock Access Management allows Authorization Bypass. This issue affects access management: before 7.3.0, before 7.2.1, before 7.1.4, through 7.0.2.

    ForgeRock Access Management
  • High 7.1
    CVE-2022-24670

    Any user can run unrestricted LDAP queries against a configuration endpoint

    An attacker can use the unrestricted LDAP queries to determine configuration entries

    ForgeRock Access Management