PT-2022-20899 · Unknown · Openam Consortium Edition

Tsujiguchitkyo · Published 2022-09-15 · Updated 2022-09-19 · CVE-2022-31735

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions OpenAM Consortium Edition version 14.0.0

Description The issue allows an open redirect when accessing an affected server through a specially crafted URL, potentially redirecting the user to an arbitrary website.

Recommendations For OpenAM Consortium Edition version 14.0.0, consider restricting access to specially crafted URLs to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

CVE-2022-31735

Affected Products

Openam Consortium Edition

References · 8

• https://github.com/openam-jp/openam/issues/259 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-31735 · Security Note
• https://osv.dev/vulnerability/CVE-2022-31735 · Vendor Advisory
• https://t.me/cvenotify/36448 · Telegram Post
• https://t.me/cvenotify/36191 · Telegram Post
• https://t.me/cvenotify/36205 · Telegram Post
• https://t.me/cibsecurity/49809 · Telegram Post
• https://jvn.jp/en/vu/JVNVU99326969 · Note