CVE-2018-0696 | BDVDB-2026-112758 Detail

OpenAM ConsortiumOpenAM

Description#

OpenAM (Open Source Edition) 13.0 and later does not properly manage sessions, which allows remote authenticated attackers to change the security questions and reset the login password via unspecified vectors.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://jvn.jp/en/jp/JVN49995005/index.html
https://www.cs.themistruct.com/report/wam20181012
https://www.osstech.co.jp/support/am2018-4-1-en

Exploit#

No public exploit known

History#

Version 12019-02-13Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.