OpenIAM Directory Traversal Vulnerability

OpenIAM is a fully integrated identity and access management platform. A directory traversal vulnerability exists in batch tasks in versions of OpenIAM prior to 4.2.0.3. No detailed vulnerability details are provided at this time...

CVE-2020-13422

OpenIAM before 4.2.0.3 does not verify if a user has permissions to perform /webconsole/rest/api/ administrative actions...

CVE-2020-13421

OpenIAM before 4.2.0.3 has Incorrect Access Control for the Create User, Modify User Permissions, and Password Reset actions...

CVE-2020-13419

OpenIAM before 4.2.0.3 allows Directory Traversal in the Batch task...

CVE-2020-13418

OpenIAM before 4.2.0.3 allows XSS in the Add New User feature...

Design/Logic Flaw

OpenIAM before 4.2.0.3 allows XSS in the Add New User feature...

Directory traversal

OpenIAM before 4.2.0.3 allows Directory Traversal in the Batch task...

CVE-2020-13420

OpenIAM before 4.2.0.3 allows remote attackers to execute arbitrary code via Groovy Script...

Github OpenIAM 路径遍历漏洞

OpenIAM is a fully integrated identity and access management platform. A directory traversal vulnerability exists in batch tasks in versions of OpenIAM prior to 4.2.0.3. No detailed vulnerability details are provided at this time...

Github OpenIAM 跨站脚本漏洞

OpenIAM is a fully integrated identity and access management platform. A cross-site scripting vulnerability exists in the "Add New User" feature in OpenIAM versions prior to 4.2.0.3. No details of the vulnerability are available at this time...

PT-2021-9610 · Openiam · Openam

Name of the Vulnerable Software and Affected Versions: OpenIAM versions prior to 4.2.0.3 Description: The issue concerns a lack of permission verification for users attempting to perform administrative actions through the "/webconsole/rest/api/" endpoint. This means that users without proper...

Security Bulletin: IBM SDK, Java Technology Edition Quarterly CPU - Oct 2015 (CVE-2015-4872, CVE-2015-4893, CVE-2015-4803)

Summary IBM Cloud Manager is vulnerable to some Java vulnerabilities, which allow a remote attacker to cause a denial of service. Vulnerability Details CVEID: CVE-2015-4872 DESCRIPTION: An unspecified vulnerability in Oracle Java SE and JRockit related to the Security component has no...