Security Advisory

CVE-2021-4201

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2022-02-14 21:04:29

Last updated 2025-04-14 17:03:52

Assigner ForgeRock

CVSS score 9.6

State PUBLISHED

Description

Missing access control in ForgeRock Access Management 7.1.0 and earlier versions on all platforms allows remote unauthenticated attackers to hijack sessions, including potentially admin-level sessions. This issue affects: ForgeRock Access Management 7.1 versions prior to 7.1.1; 6.5 versions prior to 6.5.4; all previous versions.

← Browse all CVEs View on cve.org ↗