medium6.1
CVE-2022-31735
OpenAM Consortium Edition version 14.0.0 provided by OpenAM Consortium contains an open redirect vulnerability (CWE-601).
Impact
OpenAM Consortium Edition version 14.0.0 provided by OpenAM Consortium contains an open redirect vulnerability (CWE-601). When accessing an affected server through some specially crafted URL, the user may be redirected to an arbitrary website.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Osstech | Openam | from 13.0.0 through 13.0.0-183 from 14.0.0 through 14.2.0-2 |