CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

RedhatCVE•added 2025/05/22 7:22 a.m.•20 views

CVE-2018-7272

The REST APIs in ForgeRock AM before 5.5.0 include SSOToken IDs as part of the URL, which allows attackers to obtain sensitive information by finding an ID value in a log file...

6.5CVSS6.3AI score0.00861EPSS

SaveExploits0References1

Prion•added 2018/02/21 12:29 a.m.•24 views

Cross site request forgery (csrf)

The REST APIs in ForgeRock AM before 5.5.0 include SSOToken IDs as part of the URL, which allows attackers to obtain sensitive information by finding an ID value in a log file...

4CVSS6.2AI score0.00861EPSS

SaveExploits0References2Affected Software1

NVD•added 2018/02/21 12:29 a.m.•30 views

CVE-2018-7272

The REST APIs in ForgeRock AM before 5.5.0 include SSOToken IDs as part of the URL, which allows attackers to obtain sensitive information by finding an ID value in a log file...

6.5CVSS6.2AI score0.00861EPSS

SaveExploits0References2

Rapid7 Vulnerability Database (full)•added 2018/02/21 12:00 a.m.•6 views

CVE-2018-7272: Exposure of Sensitive Information to an Unauthorized Actor

The REST APIs in ForgeRock AM before 5.5.0 include SSOToken IDs as part of the URL, which allows attackers to obtain sensitive information by finding an ID value in a log file...

6.5CVSS6.6AI score0.00861EPSS

SaveExploits0References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by