Threats tagged 'ghsa-mj2w-95gj-v3w5'

OpenAM versions prior to 16.1.4 have a denial of service vulnerability that allows unauthenticated attackers to exhaust server resources by sending serialized Java data without size or structure limits. This can disrupt authentication, session validation, and policy decision processes.