image credit: vecteezy
Offered by identity and access management solutions provider ForgeRock, Access Management (AM) is designed to allow organizations to manage various types of digital identities. AM is based on the OpenAM open source solution, which ForgeRock sponsored until 2016.
The vulnerability discovered in ForgeRock AM, tracked as CVE-2021-35464 and rated critical, is a Java deserialization issue that can be exploited by an unauthenticated attacker for remote code execution by sending a specially crafted request to an exposed system.
Comments are closed.
