3 matches found
CVE-2018-7272
The REST APIs in ForgeRock AM before 5.5.0 include SSOToken IDs as part of the URL, which allows attackers to obtain sensitive information by finding an ID value in a log file...
6.5CVSS6.3AI score0.00861EPSS
SaveExploits0References1
CVE-2018-7272
The REST APIs in ForgeRock AM before 5.5.0 include SSOToken IDs as part of the URL, which allows attackers to obtain sensitive information by finding an ID value in a log file...
6.5CVSS6.2AI score0.00861EPSS
SaveExploits0References2
Cross site request forgery (csrf)
The REST APIs in ForgeRock AM before 5.5.0 include SSOToken IDs as part of the URL, which allows attackers to obtain sensitive information by finding an ID value in a log file...
4CVSS6.2AI score0.00861EPSS
SaveExploits0References2Affected Software1
20