Description
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ForgeRock Access Management allows Authorization Bypass.
This issue affects access management: before 7.3.0, before 7.2.1, before 7.1.4, through 7.0.2.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| forgerock | access management | < 7.3.0, < 7.2.1, < 7.1.4, ≤ 7.0.2 | 7.3.0 |
References
- https://backstage.forgerock.com/downloads/browse/am/featured product
- https://backstage.forgerock.com/knowledge/kb/article/a64088600 mitigation release-notes vendor-advisory