Threats tagged 'ghsa-cj8f-2fhf-826r'

A vulnerability in OpenAM Community Edition through version 16.0.6 allows an attacker to forge OAuth2 bearer tokens and OIDC ID tokens with arbitrary attributes by exploiting an authorization bypass through a user-controlled key. The flaw exists in the OAuth2 token-read path, which improperly accepts attacker-controlled tokens from the shared Core Token Store without proper integrity checks. This vulnerability requires the attacker to place malicious JSON data into the token store, which can be triggered via a low-privileged user in a Push Notification-enabled realm. The issue is patched in version 16.1.1.