CVE-2021-4201

🗓️ 14 Feb 2022 21:04:29Reported by ForgeRockType

Missing access control in ForgeRock Access Management allows remote attackers to hijack admin-level sessions

Reporter	Title	Published	Views	Family All 5
CNNVD	ForgeRock Access Management授权问题漏洞	14 Feb 202200:00	–	cnnvd
Cvelist	CVE-2021-4201 Pre-authentication session hijacking	14 Feb 202221:04	–	cvelist
EUVD	EUVD-2021-34059	3 Oct 202520:07	–	euvd
NVD	CVE-2021-4201	14 Feb 202222:15	–	nvd
Prion	Improper access control	14 Feb 202222:15	–	prion

NVD

Node

forgerock access_managementMatch5.5.2

forgerock access_managementMatch6.0.0

forgerock access_managementMatch6.0.0.1

forgerock access_managementMatch6.0.0.2

forgerock access_managementMatch6.0.0.3

forgerock access_managementMatch6.0.0.4

forgerock access_managementMatch6.0.0.6

forgerock access_managementMatch6.0.0.7

forgerock access_managementMatch6.5.0

forgerock access_managementMatch6.5.0.1

forgerock access_managementMatch6.5.0.2

forgerock access_managementMatch6.5.1

forgerock access_managementMatch6.5.2.1

forgerock access_managementMatch6.5.2.2

forgerock access_managementMatch6.5.2.3

forgerock access_managementMatch6.5.3

forgerock access_managementMatch7.0.0

forgerock access_managementMatch7.0.1

forgerock access_managementMatch7.0.2

forgerock access_managementMatch7.1.0

[
  {
    "product": "Access Management",
    "vendor": "ForgeRock",
    "versions": [
      {
        "lessThan": "7.1.1",
        "status": "affected",
        "version": "7.1",
        "versionType": "custom"
      },
      {
        "lessThan": "6.5.4",
        "status": "affected",
        "version": "6.5",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
backstage	www.backstage.forgerock.com/knowledge/kb/article/a50037155

14 Apr 2025 17:03Current

9.6High risk

Vulners AI Score9.6

CVSS 27.5

CVSS 3.19.6 - 9.8

EPSS0.00913