Threats tagged 'ghsa-wfq9-2cqg-wvv2'

OpenAM versions prior to 16.1.4 have a server-side request forgery (SSRF) vulnerability in the certificate CRL checking process. This flaw allows attackers with a trusted CA-signed certificate to make OpenAM fetch certificate revocation lists (CRLs) from arbitrary internal hosts without destination restrictions or signature verification. Exploitation can lead to credential exposure, revocation data manipulation to block certificate authentication, and denial of service by tying up authentication threads.