Critical severity9.8NVD Advisory· Published Apr 14, 2023· Updated Jun 17, 2026
CVE-2022-3748
CVE-2022-3748
Description
Improper Authorization vulnerability in ForgeRock Inc. Access Management allows Authentication Bypass. This issue affects Access Management: from 6.5.0 through 7.2.0.
Affected products
3cpe:2.3:a:forgerock:access_management:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:forgerock:access_management:*:*:*:*:*:*:*:*range: >=6.5.0,<=7.2.0
- (no CPE)range: 6.5.0 - 7.2.0
- (no CPE)range: 6.5.0
Patches
Vulnerability mechanics
References
3- backstage.forgerock.com/knowledge/kb/article/a34332318nvdVendor Advisory
- backstage.forgerock.com/knowledge/kb/article/a92134872nvdVendor Advisory
- backstage.forgerock.com/downloads/browse/am/all/productId:amnvdPermissions Required
News mentions
0No linked articles in our index yet.