CVE-2016-10097

XML External Entity XXE Vulnerability in /SSOPOST/metaAlias/%realm%/idpv2 in OpenAM - Access Management 10.1.0 allows remote attackers to read arbitrary files via the SAMLRequest parameter...

PT-2017-7730

Name of the Vulnerable Software and Affected Versions OpenAM - Access Management version 10.1.0 Description The issue allows remote attackers to read arbitrary files via the SAMLRequest parameter in the /SSOPOST/metaAlias/%realm%/idpv2 endpoint. This is an XML External Entity XXE vulnerability...