Unrated severityNVD Advisory· Published Feb 28, 2023· Updated Apr 14, 2025

AM Web Policy Agent path traversal

CVE-2023-0339

Description

Relative Path Traversal vulnerability in ForgeRock Access Management Web Policy Agent allows Authentication Bypass. This issue affects Access Management Web Policy Agent: all versions up to 5.10.1

Affected products

Forgerock/Access Managementllm-fuzzy2 versions
<=5.10.1+ 1 more
- (no CPE)range: <=5.10.1
- (no CPE)range: 1.0.0

Patches

Vulnerability mechanics

References

backstage.forgerock.com/downloads/browse/am/featured/web-agentsmitre
backstage.forgerock.com/knowledge/kb/article/a21576868mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000