Description

The NT auth module in OpenAM before 14.6.6 allows a "replace Samba username attack."

Remediation

References

https://github.com/OpenIdentityPlatform/OpenAM/compare/14.6.5...14.6.6

https://github.com/OpenIdentityPlatform/OpenAM/pull/514

https://github.com/OpenIdentityPlatform/OpenAM/releases/tag/14.6.6

Related Vulnerabilities

CVE-2012-6612 Vulnerability in maven package org.apache.solr:solr-core

CVE-2014-0120 Vulnerability in maven package io.hawt:hawtio-system

CVE-2021-43306 Vulnerability in maven package org.webjars:jquery-validation

CVE-2020-14445 Vulnerability in maven package org.wso2.carbon.identity.framework:org.wso2.carbon.policyeditor.ui

CVE-2020-7781 Vulnerability in npm package connection-tester

Severity

Medium

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Tags

Patch Release Notes Third Party Advisory NVD-CWE-Other