Threats tagged 'ghsa-xv75-9hr2-vf5x'

OpenAM versions before 16.1.4 and its client SDK have a vulnerability in the internal server-to-server SOAP communication channel where responses are not sufficiently validated. This flaw allows attackers positioned on the network to impact the integrity and availability of the system. Specifically, attackers who can intercept unencrypted traffic or control a site server may crash receiving processes, tamper with writable files, and potentially execute code.