CVE-2022-25626

An unauthenticated user can access Identity Manager’s management console specific page URLs. However, the system doesn’t allow the user to carry out server side tasks without a valid web session...

CVE-2022-25626

An unauthenticated user can access Identity Manager’s management console specific page URLs. However, the system doesn’t allow the user to carry out server side tasks without a valid web session...

CVE-2022-25626

CVE-2022-25626 affects Identity Manager. An unauthenticated user can access management-console page URLs, but cannot perform server-side tasks without an active web session. Public data across multiple feeds corroborates access to specific URLs without session establishment; however, no concrete ...