PT-2019-7969

Name of the Vulnerable Software and Affected Versions ForgeRock Access Management OpenAM versions 13.5.0 through 13.5.1 Access Management AM versions 5.0.0 through 5.1.1 Description The OAuth 2.0 Authorization Server does not correctly validate the redirect uri for some invalid requests, allowing...

CVE-2017-14394: URL Redirection to Untrusted Site

OAuth 2.0 Authorization Server of ForgeRock Access Management OpenAM 13.5.0-13.5.1 and Access Management AM 5.0.0-5.1.1 does not correctly validate redirecturi for some invalid requests, which allows attackers to perform phishing via an unvalidated redirect...