Threats tagged 'ghsa-hv5h-fgcg-pwgf'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Critical	10.0	CVE-2026-123551OpenAM from 14.0.0 before 16.1.4 contains an information disclosure vulnerability that allows unauthenticated Critical10.02026-11-08GCVE DatabaseCVE-2026-123551 OpenAM versions from 14.0.0 up to but not including 16.1.4 have an information disclosure vulnerability. This flaw allows unauthenticated attackers to read live session tokens via the notification WebSocket by bypassing agent-only checks through an unvalidated internal forward on legacy Liberty ID-FF endpoints. Exploitation can lead to hijacking of user and administrator sessions. Report on CVE-2026-123551 Vulnerability CWE-201 #ghsa-hv5h-fgcg-pwgf	GCVE Database	2026-11-08

Page 1 of 1