Skip to content
OpenAdvisories

Vendor

ForgeRock

9 known vulnerabilities.

Products

Access Management 5 Access Management Web Policy Agent 1 LDAP Connector 1 Access Management Java Policy Agent 1 OpenIDM and Java Remote Connector Server (RCS) 1
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Critical 9.8
    CVE-2022-3748

    Improper authorization that can lead to account impersonation

    Improper Authorization vulnerability in ForgeRock Inc. Access Management allows Authentication Bypass. This issue affects Access Management: from 6.5.0 through 7.2.0.

    ForgeRock Access Management
  • Critical 9.1
    CVE-2023-0511

    AM Java Policy Agent path traversal

    Relative Path Traversal vulnerability in ForgeRock Access Management Java Policy Agent allows Authentication Bypass. This issue affects Access Management Java Policy Agent: all versions up to 5.10.1

    ForgeRock Access Management Java Policy Agent
  • Critical 9.1
    CVE-2023-0339

    AM Web Policy Agent path traversal

    Relative Path Traversal vulnerability in ForgeRock Access Management Web Policy Agent allows Authentication Bypass. This issue affects Access Management Web Policy Agent: all versions up to 5.10.1

    ForgeRock Access Management Web Policy Agent
  • Critical 9.3
    CVE-2022-0143

    LDAP Connector: When startTLS is used then LDAP connector ignores the wrong password

    When the LDAP connector is started with StartTLS configured, unauthenticated access is granted. This issue affects: all versions of the LDAP connector prior to 1.5.20.9. The LDAP connector is bundled with Identity Management (IDM) and Remote Connector Server …

    ForgeRock LDAP Connector
  • Critical 9.6
    CVE-2021-4201

    Pre-authentication session hijacking

    Missing access control in ForgeRock Access Management 7.1.0 and earlier versions on all platforms allows remote unauthenticated attackers to hijack sessions, including potentially admin-level sessions. This issue affects: ForgeRock Access Management 7.1 versi…

    ForgeRock Access Management