medium6.1
CVE-2024-25566
An Open-Redirect vulnerability exists in PingAM where well-crafted requests may cause improper validation of redirect URLs.
Impact
An Open-Redirect vulnerability exists in PingAM where well-crafted requests may cause improper validation of redirect URLs. This could allow an attacker to redirect end-users to malicious sites under their control, simplifying phishing attacks
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Forgerock | Access Management | through 7.0.2 from 7.1.0 through 7.1.4 from 7.2.0 through 7.2.2 Versions 7.3.0, 7.3.1, 7.4.0 |