CVE-2018-7272

The REST APIs in ForgeRock AM before 5.5.0 include SSOToken IDs as part of the URL, which allows attackers to obtain sensitive information by finding an ID value in a log file...

Cross site request forgery (csrf)

The REST APIs in ForgeRock AM before 5.5.0 include SSOToken IDs as part of the URL, which allows attackers to obtain sensitive information by finding an ID value in a log file...

CVE-2018-7272

The REST APIs in ForgeRock AM before 5.5.0 include SSOToken IDs as part of the URL, which allows attackers to obtain sensitive information by finding an ID value in a log file...

PT-2018-17990

Name of the Vulnerable Software and Affected Versions ForgeRock AM versions prior to 5.5.0 Description The issue concerns the REST APIs in ForgeRock AM, where SSOToken IDs are included as part of the URL. This allows attackers to potentially obtain sensitive information by finding an ID value in ...

CVE-2018-7272: Exposure of Sensitive Information to an Unauthorized Actor

The REST APIs in ForgeRock AM before 5.5.0 include SSOToken IDs as part of the URL, which allows attackers to obtain sensitive information by finding an ID value in a log file...