Unrated severityNVD Advisory· Published Mar 25, 2021· Updated Aug 3, 2024
CVE-2021-29156
CVE-2021-29156
Description
ForgeRock OpenAM before 13.5.1 allows LDAP injection via the Webfinger protocol. For example, an unauthenticated attacker can perform character-by-character retrieval of password hashes, or retrieve a session token or a private key.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- ForgeRock/OpenAMdescription
Patches
Vulnerability mechanics
References
2- bugster.forgerock.org/jira/browse/OPENAM-10135mitrex_refsource_MISC
- portswigger.net/research/hidden-oauth-attack-vectorsmitrex_refsource_MISC
News mentions
0No linked articles in our index yet.