SAML IdP Malfunction in OpenAM by OpenAM Consortium
CVE-2025-8662

2.3LOW

Key Information:

Vendor

Openam Consortium

Status
Openam
Vendor
CVE Published:
2 September 2025

What is CVE-2025-8662?

A security flaw in OpenAM (OpenAM Consortium Edition) could lead to a malfunction when it operates as a SAML Identity Provider (IdP). This vulnerability arises from the potential for a tampered request, affecting users of OpenAM versions 14.0.0 through 14.0.1. It is essential for administrators to apply necessary updates to ensure secure functionality and protect against potential exploitation.

Affected Version(s)

OpenAM 14.0.0 <= 14.0.1

References

https://openam-jp.github.io/Advisories/CVE-2025-8662/

CVSS V4

Score:
2.3
Severity:
LOW
Confidentiality:
None
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Hiromu Miyazaki (OSSTech Corporation)
.