Lucene search

ForgeRockCVE-2023-0511

HistoryFeb 28, 2023 - 5:15 p.m.

CVE-2023-0511

2023-02-2817:15:10

CWE-23

CWE-22

ForgeRock

web.nvd.nist.gov

cve-2023-0511

forgerock

access management

java policy agent

security

vulnerability

authentication bypass

nvd

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.3

Confidence

High

EPSS

0.001

Percentile

49.9%

JSON

Relative Path Traversal vulnerability in ForgeRock Access Management Java Policy Agent allows Authentication Bypass. This issue affects Access Management Java Policy Agent: all versions up to 5.10.1

Affected configurations

Nvd

Node

forgerockjava_policy_agentsRange≤5.10.1

VendorProductVersionCPE
forgerockjava_policy_agents*cpe:2.3:a:forgerock:java_policy_agents:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
forgerock	java_policy_agents	*	cpe:2.3:a:forgerock:java_policy_agents::::::::

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Access Management Java Policy Agent",
    "vendor": "ForgeRock",
    "versions": [
      {
        "lessThanOrEqual": "5.10.1",
        "status": "affected",
        "version": "1.0.0",
        "versionType": "semver"
      }
    ]
  }
]

References

backstage.forgerock.com/downloads/browse/am/featured/java-agents

backstage.forgerock.com/knowledge/kb/article/a21576868

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.3

Confidence

High

EPSS

0.001

Percentile

49.9%

JSON

Related for CVE-2023-0511