VYPR
← All advisories
High severity8.1NVD Advisory· Published Mar 27, 2024· Updated Jun 17, 2026

CVE-2023-0582

CVE-2023-0582

Description

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ForgeRock Access Management allows Authorization Bypass.

This issue affects access management: before 7.3.0, before 7.2.1, before 7.1.4, through 7.0.2.

Affected products

4
  • Forgerock/Access Management4 versions
    cpe:2.3:a:forgerock:access_management:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:forgerock:access_management:*:*:*:*:*:*:*:*range: <7.1.4
    • cpe:2.3:a:forgerock:access_management:7.2.0:*:*:*:*:*:*:*
    • (no CPE)range: <7.3.0, <7.2.1, <7.1.4, <=7.0.2
    • (no CPE)range: 0

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.