OpenAM <= 16.0.5 - Pre-Auth RCE via jato.clientSession Deserialization

Open Access Management OpenAM is an access management solution. Prior to 16.0.6, OpenIdentityPlatform OpenAM is vulnerable to pre-authentication Remote Code Execution RCE via unsafe Java deserialization of the jato.clientSession HTTP parameter. This bypasses the WhitelistObjectInputStream...

OpenAM<=15.0.3 FreeMarker - Template Injection

OpenAM is an open access management solution. In versions 15.0.3 and prior, the getCustomLoginUrlTemplate method in RealmOAuth2ProviderSettings.java is vulnerable to template injection due to its usage of user input id: CVE-2024-41667 info: name: OpenAM=15.0.3 FreeMarker - Template Injection...

LDAP Injection In OpenAM

OpenAM contains an LDAP injection vulnerability. When a user tries to reset his password, they are asked to enter username, and then the backend validates whether the user exists or not through an LDAP query. If the user exists, the password reset token is sent to the user's email. Enumeration ca...

OpenAM

Open Access Management OpenAM — это решение для управления доступом, которое включает аутентификацию, единый вход SSO, авторизацию, федерацию, права доступа Entitlements и безопасность веб-сервисов Web Services Security. Cross Domain Single Sign On CDSSO, SAML 2.0, OAuth 2.0 и OpenID Connect...

openam-CVE-2021-35464

openam CVE-2021-35464 Выполнение команд tomcat с выводом результата. Проект основан на ysoserial и Java-Rce-Echo Для сборки проекта необходимо добавить в зависимости ysoserial.jar и jato-14.6.3.jar root@kitploit: POST /OpenAM/ccversion/Version HTTP/1.1 Host: php.local:8081...

CVE-2021-29156

CVE-2021-29156 Доказательство концепции c 2021 GuidePoint Security Charlton Trezevant [email protected] Предыстория Сегодня GuidePoint рада выпустить функциональный инструмент для демонстрации уязвимости CVE-2021-29156 — LDAP-инъекции в ForgeRock OpenAM v13.0.0. Эта уязвимость позволяет...

CVE-2026-33439-PoC

CVE-2026-33439 — OpenAM 事前認証RCE（エコーモード） コマンド出力がHTTPレスポンスに直接返されます — DNS外部送信やOOBは不要です。 逆シリアル化中にアクティブなJATO ThreadLocalのリクエスト/レスポンスへアクセスするため、com.iplanet.jato.RequestManager.getRequestContext を使用します。従来のTomcatエコー手法（Thread.target / ThreadGroup.threads トラバーサル）が失敗するJava 21+で動作します。 前提条件 JDK...

CVE-2026-33439-OpenAM

CVE-2026-33439는 OpenAM16.0.6의 JATO ViewBean 엔드포인트에 영향을 미치는 사전 인증Pre-auth 안전하지 않은 역직렬화Unsafe Deserialization 문제입니다. 공개 권고문에서는 JATO 엔드포인트를 언급하지만 도달 가능한 경로를 열거하지는 않습니다. 이 연구는 /openam/ui/PWResetUserValidation을 도달 가능한 사전 인증 JATO 엔드포인트로 식별합니다...

UBUNTU-CVE-2026-62263

Open Access Management OpenAM is an access management solution. Prio...

CVE-2026-45794

Open Access Management OpenAM is an access management solution. Prio...

CVE-2026-46619

Open Access Management OpenAM is an access management solution. Prio...

CVE-2026-45051

Open Access Management OpenAM is an access management solution. Prio...

CVE-2026-45052

Open Access Management OpenAM is an access management solution. Prio...

CVE-2026-46623

Open Access Management OpenAM is an access management solution. Prio...

CVE-2026-41573

Open Access Management OpenAM is an access management solution. Prio...

UBUNTU-CVE-2026-45052

Open Access Management OpenAM is an access management solution. Prio...

UBUNTU-CVE-2026-41573

Open Access Management OpenAM is an access management solution. Prio...

CVE-2026-47424

Open Access Management OpenAM is an access management solution. Prio...

CVE-2026-62280

Open Access Management OpenAM is an access management solution. From...

CVE-2026-62379

Open Access Management OpenAM is an access management solution. Prio...