CVE-2023-0582

published 2024-03-27

CVE-2023-0582: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ForgeRock Access Management allows Authorization Bypass. This…

Priority P3 54 critical 9.8 CVSS 3.1

AV N AC L PR N UI N S U C H I H A H

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ForgeRock Access Management allows Authorization Bypass.

This issue affects access management: before 7.3.0, before 7.2.1, before 7.1.4, through 7.0.2.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
forgerock	access_management	< 7.3.0	7.3.0
forgerock	access_management	< 7.2.1	7.2.1
forgerock	access_management	< 7.1.4	7.1.4
forgerock	access_management	<= 7.0.2	—
forgerock	access_management	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-22