Lucene search

K
prionPRIOn knowledge basePRION:CVE-2021-29156
HistoryMar 25, 2021 - 9:15 a.m.

Code injection

2021-03-2509:15:00
PRIOn knowledge base
www.prio-n.com
3

0.365 Low

EPSS

Percentile

97.2%

ForgeRock OpenAM before 13.5.1 allows LDAP injection via the Webfinger protocol. For example, an unauthenticated attacker can perform character-by-character retrieval of password hashes, or retrieve a session token or a private key.

CPENameOperatorVersion
openamlt13.5.1

0.365 Low

EPSS

Percentile

97.2%