CVE-2021-37154

In ForgeRock Access Management AM before 7.0.2, the SAML2 implementation allows XML injection, potentially enabling a fraudulent SAML 2.0 assertion...

CVE-2021-37154: XML Injection (aka Blind XPath Injection)

In ForgeRock Access Management AM before 7.0.2, the SAML2 implementation allows XML injection, potentially enabling a fraudulent SAML 2.0 assertion...

PT-2021-21536

Name of the Vulnerable Software and Affected Versions ForgeRock Access Management AM versions prior to 7.0.2 Description The SAML2 implementation in the affected software allows XML injection, potentially enabling a fraudulent SAML 2.0 assertion. Recommendations For versions prior to 7.0.2, updat...