Security Advisory

CVE-2021-37154

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-08-25 20:02:53
Last updated 2024-08-04 01:16:03
Assigner mitre
State PUBLISHED

Description

In ForgeRock Access Management (AM) before 7.0.2, the SAML2 implementation allows XML injection, potentially enabling a fraudulent SAML 2.0 assertion.