CVE-2016-10097

CVE-2016-10097 affects ForgeRock OpenAM - Access Management 10.1.0. An XML External Entity (XXE) vulnerability exists in the endpoint /SSOPOST/metaAlias/%realm%/idpv2, allowing remote attackers to read arbitrary files via the SAMLRequest parameter. The issue is confirmed by multiple sources in co...

PT-2017-7730

Name of the Vulnerable Software and Affected Versions OpenAM - Access Management version 10.1.0 Description The issue allows remote attackers to read arbitrary files via the SAMLRequest parameter in the /SSOPOST/metaAlias/%realm%/idpv2 endpoint. This is an XML External Entity XXE vulnerability...