Threats tagged 'ghsa-cmgw-57mx-4pqx'

OpenAM Consortium Edition versions 14.0.5 and earlier contain an open redirect vulnerability in the Liberty ID-FF service provider single sign-on flow. The vulnerability arises because the 'goto' parameter in the /preLogin endpoint is stored as the RelayState without validation, allowing redirection to arbitrary websites after authentication. This can be exploited by remote unauthenticated attackers to redirect users to malicious sites, potentially facilitating phishing attacks. Only deployments with Liberty ID-FF configured are affected; it is not enabled by default. The issue is fixed in version 14.0.6, which disables the legacy Liberty ID-FF endpoints.