The Core Server in OpenAM 9.5.3 through 9.5.5, 10.0.0...
Low severity
Unreviewed
Published
May 17, 2022
to the GitHub Advisory Database
•
Updated Apr 12, 2025
Description
Published by the National Vulnerability Database
Nov 14, 2014
Published to the GitHub Advisory Database
May 17, 2022
Last updated
Apr 12, 2025
The Core Server in OpenAM 9.5.3 through 9.5.5, 10.0.0 through 10.0.2, 10.1.0-Xpress, and 11.0.0 through 11.0.2, when deployed on a multi-server network, allows remote authenticated users to cause a denial of service (infinite loop) via a crafted cookie in a request.
References