Open Redirect Vulnerability in OpenAM by Forgerock
CVE-2019-5915

6.1MEDIUM

Key Information:

Vendor

Openam Consortium

Status
Openam (open Source Edition)
Vendor
CVE Published:
13 February 2019

What is CVE-2019-5915?

An open redirect vulnerability exists in OpenAM (Open Source Edition) 13.0, allowing remote attackers to manipulate URLs. By crafting a specific link, attackers can redirect users to arbitrary websites, potentially leading to phishing attempts and user credential theft. This presents a significant risk as unsuspecting users may be tricked into providing sensitive information on malicious sites that mimic legitimate services.

Affected Version(s)

OpenAM (Open Source Edition) 13

References

https://www.cs.themistruct.com/
x_refsource_MISC
http://jvn.jp/en/jp/JVN43193964/index.html
third-party-advisoryx_refsource_JVN
https://www.osstech.co.jp/support/am2019-1-1
x_refsource_MISC

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.