Critical severity9.1NVD Advisory· Published Feb 28, 2023· Updated Jun 17, 2026

CVE-2023-0339

Description

Relative Path Traversal vulnerability in ForgeRock Access Management Web Policy Agent allows Authentication Bypass. This issue affects Access Management Web Policy Agent: all versions up to 5.10.1

Affected products

Forgerock/Web Policy Agents
cpe:2.3:a:forgerock:web_policy_agents:*:*:*:*:*:*:*:*
Range: <=5.10.1
Forgerock/Access Managementllm-fuzzy2 versions
<=5.10.1+ 1 more
- (no CPE)range: <=5.10.1
- (no CPE)range: 1.0.0

Patches

Vulnerability mechanics

References

backstage.forgerock.com/knowledge/kb/article/a21576868nvdMitigationRelease NotesVendor Advisory
backstage.forgerock.com/downloads/browse/am/featured/web-agentsnvdProduct

News mentions

No linked articles in our index yet.

cvss	0.591
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000