Junglewise Threat Intelligence

CVE-2023-37471: OpenAM vulnerable to user impersonation using SAMLv1.x SSO process

CVE-2023-37471 · Severity: low · CVSS 3.1 · Published 2023-07-20

Technologies: org.openidentityplatform.openam:openam-federation-library (Maven). Vendors: Maven.

Executive brief

OpenAM vulnerable to user impersonation using SAMLv1.x SSO process

Affected products

Maven org.openidentityplatform.openam:openam-federation-library

Related threats

Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, the Liberty Web Services SOAP receiver permits unauthenti
Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, certain federation endpoints in a non-default clustered c