Threats tagged 'ghsa-f9mm-fxrq-6c5v'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Critical	9.3	CVE-2026-123550OpenAM before 16.1.4 contains an authentication bypass vulnerability in its SAML v2.0 service provider that accepts Critical9.32026-11-08GCVE DatabaseCVE-2026-123550 OpenAM versions before 16.1.4 have an authentication bypass vulnerability in the SAML v2.0 service provider. This flaw allows unauthenticated remote attackers to submit forged unsigned assertions on specific bindings when WantAssertionsSigned is false, enabling them to impersonate any mapped user, including administrators, and hijack single sign-on sessions. Report on CVE-2026-123550 Vulnerability CWE-290 #ghsa-f9mm-fxrq-6c5v	GCVE Database	2026-11-08

Page 1 of 1