infisical

The open-source security infrastructure platform : Manage secrets, certificates, keys, privileged access, and AI agent access in one platform. Community | Infisical Cloud | Self-Hosting | Docs | Website | X | Hiring Remote/SF Introduction Infisical is the open source security infrastructure...

OpenAM

Open Access Management OpenAM is an access management solution that includes Authentication, SSO, Authorization, Federation, Entitlements, and Web Services Security. Cross Domain Single Sign On CDSSO, SAML 2.0, OAuth 2.0 & OpenID Connect ensure that OpenAM integrates easily with legacy, custom, a...

keycloak__keycloak_CVE-2022-3782_20-0-1

Keycloak Keycloak is an Open Source Identity and Access Management solution for modern Applications and Services. This repository contains the source code for the Keycloak Server, Java adapters and the JavaScript adapter. Help and Documentation Documentation User Mailing List - Mailing list for...

keycloak__keycloak_CVE-2022-4137_20-0-3

Keycloak Keycloak is an Open Source Identity and Access Management solution for modern Applications and Services. This repository contains the source code for the Keycloak Server, Java adapters and the JavaScript adapter. Help and Documentation Documentation User Mailing List - Mailing list for...

IAM Proxy Component Compromise Information Disclosure

The vulnerability of the IAM Proxy component of the Identity & Access Management tool in Platform V IAM is related to synchronization errors when using a common resource. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...

keycloak__keycloak_CVE-2022-4361_21-1-1

Keycloak Keycloak is an Open Source Identity and Access Management solution for modern Applications and Services. This repository contains the source code for the Keycloak Server, Java adapters and the JavaScript adapter. Help and Documentation Documentation User Mailing List - Mailing list for...

keycloak

Open Source Identity and Access Management Add authentication to applications and secure services with minimum effort. No need to deal with storing users or authenticating users. Keycloak provides user federation, strong authentication, user management, fine-grained authorization, and more. Help...

vault

Vault Please note : We take Vault's security and our users' trust very seriously. If you believe you have found a security issue in Vault, please responsibly disclose by contacting us at [email protected]. Website: developer.hashicorp.com/vault Announcement list: Google Groups Discussion...

lightwave

What is Lightwave Project Lightwave is an open source project comprised of enterprise-grade, identity and access management services targeting critical security, governance, and compliance challenges for Cloud-Native Apps within the enterprise. Through integration with Project Photon, Project...

The Secure Software Factory: A Reference Architecture

The Secure Software Factory: A Reference Architecture is a 26-page whitepaper outlining a security framework for AI-driven software development environments. It describes how organizations can safely deploy autonomous coding agents by enforcing four security boundaries: sandbox isolation, network...

Remote Access Management Privilege Escalation

The vulnerability of the Remote Access Management service in Windows operating systems is related to the lack of authentication for critical functions. Exploiting this vulnerability can allow attackers to increase their privileges...

keycloak

Gestione di identità e accesso open source Aggiungi l'autenticazione alle applicazioni e proteggi i servizi con il minimo sforzo. Nessuna necessità di gestire l'archiviazione degli utenti o la loro autenticazione. Keycloak offre federazione degli utenti, autenticazione forte, gestione degli utent...

keycloak v26.7.5

Open Source Identity and Access Management Add authentication to applications and secure services with minimum effort. No need to deal with storing users or authenticating users. Keycloak provides user federation, strong authentication, user management, fine-grained authorization, and more. Help...

CVE-2026-97176 Keycloak-services: keycloak-services: essential acr requirement silently bypassed via cookie authenticator

A flaw was found in the Level of Authentication enforcement mechanism of Keycloak, an identity and access management solution. The issue occurs when a client specifically requires a higher security level for a user who already has an active session at a lower level. Due to a logic error in how...

Enterprise Access Management EAM does not rotate RSA keys

Overview Imprivata Enterprise Access Management EAM, an authentication and single sign-on platform for enterprise and clinical environments, contains a vulnerability in versions 26.2.6 and below. The product provides no supported mechanism to rotate its RSA key pair after deployment, meaning the...

OpenAM v16.1.3

Open Access Management OpenAM is an access management solution that includes Authentication, SSO, Authorization, Federation, Entitlements, and Web Services Security. Cross Domain Single Sign On CDSSO, SAML 2.0, OAuth 2.0 & OpenID Connect ensure that OpenAM integrates easily with legacy, custom, a...

CVE-2026-44203

Open Access Management OpenAM is an access management solution. Prior to 16.1.1, the OAuth 2.0 and OpenID Connect authorization endpoint does not sufficiently encode user-supplied parameters before FormPostResponse.ftl and checkSession.ftl render them into HTML for the formpost response mode. An...

CVE-2026-53660

Open Access Management OpenAM is an access management solution. Prior to 16.1.1, the default configuration initializes the iPlanetDirectoryPro SSO cookie with HttpOnly disabled and without a protective SameSite default, and OAuth and OpenID Connect consent flows reuse that cookie through...

UBUNTU-CVE-2026-53660

Open Access Management OpenAM is an access management solution. Prior to 16.1.1, the default configuration initializes the iPlanetDirectoryPro SSO cookie with HttpOnly disabled and without a protective SameSite default, and OAuth and OpenID Connect consent flows reuse that cookie through...

UBUNTU-CVE-2026-46619

Open Access Management OpenAM is an access management solution. Prior to 16.1.1, MSISDNValidation in the MSISDN authentication module concatenates the request-supplied MSISDN value into an LDAP search filter without escaping, while the default empty trusted-gateway list allows all traffic. In a...