Beveiligingsadvies

CVE-2026-44793

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-09-15 09:42:18

Laatst bijgewerkt 2026-09-15 13:53:25

Toegewezen door GitHub_M

CVSS-score 7.0

Status PUBLISHED

Beschrijving

Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, certain federation endpoints in a non-default clustered configuration inconsistently encode user-supplied parameters rendered into HTML in the SAML2 cluster cookie-hash redirect path. An unauthenticated attacker can induce a user to follow a crafted request and execute script in the OpenAM origin. This issue is fixed in version 16.1.1.

← Alle CVE's bekijken Bekijk op cve.org ↗