CVE-2018-0696

2019-02-1318:00:00

jpcert

www.cve.org

7.3 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

75.2%

JSON

OpenAM (Open Source Edition) 13.0 and later does not properly manage sessions, which allows remote authenticated attackers to change the security questions and reset the login password via unspecified vectors.

CNA Affected

[
  {
    "product": "OpenAM",
    "vendor": "OpenAM Consortium",
    "versions": [
      {
        "status": "affected",
        "version": "13.0 and later"
      }
    ]
  }
]