OpenIAM before 4.2.0.3 has Incorrect Access Control for the Create User, Modify User Permissions, and Password Reset actions.

Published Apr 6, 2021 · Updated Aug 4, 2024 · Assigned by mitre