CVE-2024-25566
29.10.2024, 16:15
An Open-Redirect vulnerability exists in PingAM where well-crafted requests may cause improper validation of redirect URLs. This could allow an attacker to redirect end-users to malicious sites under their control, simplifying phishing attacks
| Vendor | Product | Version |
|---|---|---|
| forgerock | access_management | 𝑥 ≤ 7.0.2 |
| forgerock | access_management | 7.1.0 ≤ 𝑥 ≤ 7.1.4 |
| forgerock | access_management | 7.2.0 ≤ 𝑥 ≤ 7.2.2 |
| forgerock | access_management | 7.3.0 |
| forgerock | access_management | 7.3.1 |
| forgerock | access_management | 7.4.0 |
| forgerock | access_management | 7.4.1 |
| forgerock | access_management | 7.5.0 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration