Sign In
Advisories

OpenAM before 16.1.4 Open Redirect via WS-Federation and SAML v2.0 Pages

Go back
Severity
low
Date
Affecting

  • OpenAM >= 0, < 16.1.4

  • OpenAM >= 0, < 16.1.4

CWE
  • CWE-601 URL Redirection to Untrusted Site ('Open Redirect')
CVSS
2.3
CVSS V4 Vector
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N
Credit
santhreal, vharseko, maximthomas, tsujiguchitky
Description
OpenIdentityPlatform OpenAM before 16.1.4 contains an open redirect because WS-Federation logout, SAML v2.0 logout and name-identifier management, SAML v2.0 identity provider finder, and some authentication pages do not check destination URLs against allowed lists. Attackers can craft OpenAM-domain links that send users to arbitrary external sites for phishing.

Ready to get Started?

Explore VulnCheck, a next-generation Cyber Threat Intelligence platform, which provides exploit and vulnerability intelligence to help you prioritize and remediate vulnerabilities that matter.
  • Vulnerability Prioritization
    Prioritize vulnerabilities that matter based on the threat landscape and defer vulnerabilities that don't.
  • Early Warning System
    Real-time alerting of changes in the vulnerability landscape so that you can take action before the attacks start.
Schedule a Demo