Lucene search

[email protected]CVE-2023-0339

HistoryFeb 28, 2023 - 5:15 p.m.

CVE-2023-0339

2023-02-2817:15:10

CWE-22

CWE-23

[email protected]

web.nvd.nist.gov

cve-2023-0339

path traversal

forgerock

access management

web policy agent

authentication bypass

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

46.5%

JSON

Relative Path Traversal vulnerability in ForgeRock Access Management Web Policy Agent allows Authentication Bypass. This issue affects Access Management Web Policy Agent: all versions up to 5.10.1

Affected configurations

NVD

Node

forgerockweb_policy_agentsRange≤5.10.1

CPENameOperatorVersion
forgerock:web_policy_agentsforgerock web policy agentsle5.10.1

CPE	Name	Operator	Version
forgerock:web_policy_agents	forgerock web policy agents	le	5.10.1

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Access Management Web Policy Agent",
    "vendor": "ForgeRock",
    "versions": [
      {
        "lessThanOrEqual": "5.10.1",
        "status": "affected",
        "version": "1.0.0",
        "versionType": "semver"
      }
    ]
  }
]

References

backstage.forgerock.com/downloads/browse/am/featured/web-agents

backstage.forgerock.com/knowledge/kb/article/a21576868

Social References

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

46.5%

JSON

Related for CVE-2023-0339

nvd1 prion1 cvelist1