CVE-2021-37154

2021-08-2520:02:53

mitre

www.cve.org

forgerock

access management

saml2

xml injection

fraudulent assertion

AI Score

9.6

Confidence

High

EPSS

0.003

Percentile

65.6%

JSON

In ForgeRock Access Management (AM) before 7.0.2, the SAML2 implementation allows XML injection, potentially enabling a fraudulent SAML 2.0 assertion.

References

backstage.forgerock.com/knowledge/kb/article/a55763454

www.forgerock.com/platform/access-management