CVE-2021-4201
14.02.2022, 22:15
Missing access control in ForgeRock Access Management 7.1.0 and earlier versions on all platforms allows remote unauthenticated attackers to hijack sessions, including potentially admin-level sessions. This issue affects: ForgeRock Access Management 7.1 versions prior to 7.1.1; 6.5 versions prior to 6.5.4; all previous versions.Enginsight
| Vendor | Product | Version |
|---|---|---|
| forgerock | access_management | 5.5.2 |
| forgerock | access_management | 6.0.0 |
| forgerock | access_management | 6.0.0.1 |
| forgerock | access_management | 6.0.0.2 |
| forgerock | access_management | 6.0.0.3 |
| forgerock | access_management | 6.0.0.4 |
| forgerock | access_management | 6.0.0.6 |
| forgerock | access_management | 6.0.0.7 |
| forgerock | access_management | 6.5.0 |
| forgerock | access_management | 6.5.0.1 |
| forgerock | access_management | 6.5.0.2 |
| forgerock | access_management | 6.5.1 |
| forgerock | access_management | 6.5.2.1 |
| forgerock | access_management | 6.5.2.2 |
| forgerock | access_management | 6.5.2.3 |
| forgerock | access_management | 6.5.3 |
| forgerock | access_management | 7.0.0 |
| forgerock | access_management | 7.0.1 |
| forgerock | access_management | 7.0.2 |
| forgerock | access_management | 7.1.0 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration