Relative Path Traversal vulnerability in ForgeRock Access Management Web Policy Agent allows Authentication Bypass. This issue affects Access Management Web Policy Agent: all versions up to 5.10.1
References
| Link | Resource |
|---|---|
| https://backstage.forgerock.com/downloads/browse/am/featured/web-agents | Product |
| https://backstage.forgerock.com/knowledge/kb/article/a21576868 | Mitigation Release Notes Vendor Advisory |
Configurations
History
09 Mar 2023, 18:48
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://backstage.forgerock.com/downloads/browse/am/featured/web-agents - Product | |
| References | (MISC) https://backstage.forgerock.com/knowledge/kb/article/a21576868 - Mitigation, Release Notes, Vendor Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
| CWE | CWE-22 | |
| CPE | cpe:2.3:a:forgerock:web_policy_agents:*:*:*:*:*:*:*:* |
28 Feb 2023, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | Relative Path Traversal vulnerability in ForgeRock Access Management Web Policy Agent allows Authentication Bypass. This issue affects Access Management Web Policy Agent: all versions up to 5.10.1 |
28 Feb 2023, 17:17
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-02-28 17:15
Updated : 2024-02-04 23:14
NVD link : CVE-2023-0339
Mitre link : CVE-2023-0339
CVE.ORG link : CVE-2023-0339
JSON object : View
Products Affected
forgerock
- web_policy_agents