Open Redirect Vulnerability in OpenAM Consortium Edition
CVE-2022-31735

6.1MEDIUM

Key Information:

Vendor

Openam Consortium

Status
Openam (openam Consortium Edition)
Vendor
CVE Published:
15 September 2022

What is CVE-2022-31735?

The OpenAM Consortium Edition version 14.0.0 is impacted by an open redirect vulnerability that allows attackers to manipulate URLs to redirect users to malicious or arbitrary websites. This may compromise user security, as they could unwittingly visit harmful sites while attempting to access legitimate content. Users and administrators of the affected product should take immediate steps to evaluate and mitigate exposure to this vulnerability.

Affected Version(s)

OpenAM (OpenAM Consortium Edition) 14.0.0

References

https://github.com/openam-jp/openam/issues/259
x_refsource_CONFIRM
https://jvn.jp/en/vu/JVNVU99326969/
third-party-advisoryx_refsource_JVN

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.