Lucene search
+L

5 matches found

Tenable Nessus
Tenable Nessus
•added 2026/09/16 12:00 a.m.•19 views

Linux Distros Unpatched Vulnerability : CVE-2026-45048

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Open Access Management OpenAM is an access management solution. Prior to 16.1.1, SessionRequestHandler in the session management endpoint does not enforce...

8.5CVSS5.7AI score0.00428EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/15 10:17 a.m.•21 views

CVE-2026-45048

Open Access Management OpenAM is an access management solution. Prior to 16.1.1, SessionRequestHandler in the session management endpoint does not enforce ownership or privilege checks when a low-privileged authenticated user queries session information in deployments using stateful session...

8.5CVSS0.00428EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/09/15 9:48 a.m.•50 views

CVE-2026-45048 OpenAM Authenticated Privilege Escalation via Raw Token Disclosure Session RPC

Open Access Management OpenAM is an access management solution. Prior to 16.1.1, SessionRequestHandler in the session management endpoint does not enforce ownership or privilege checks when a low-privileged authenticated user queries session information in deployments using stateful session...

8.5CVSS0.00428EPSS
SaveExploits0References3
Mend
Mend
•added 2026/09/15 9:48 a.m.•10 views

CVE-2026-45048

Open Access Management OpenAM is an access management solution. Prior to 16.1.1, SessionRequestHandler in the session management endpoint does not enforce ownership or privilege checks when a low-privileged authenticated user queries session information in deployments using stateful session...

9CVSS5.8AI score0.00428EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/15 12:00 a.m.•12 views

CVE-2026-45048: Exposure of Sensitive Information to an Unauthorized Actor

Open Access Management OpenAM is an access management solution. Prior to 16.1.1, SessionRequestHandler in the session management endpoint does not enforce ownership or privilege checks when a low-privileged authenticated user queries session information in deployments using stateful session...

8.5CVSS5.8AI score0.00428EPSS
SaveExploits0References3
Rows per page
Query Builder