https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-04T11:21:39.516219+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-105121 fkie_cve-2026-105121 2026-10-04T11:21:43.832217+00:00

OpenAM before 16.1.3 contains an improper authorization vulnerability that allows delegated administrators to destroy sessions outside their realms because realm checks use the requester's realm. Authenticated accounts holding the iplanet-am-session-destroy-sessions attribute can supply a target session identifier or handle to forcibly log out users in any realm.

 https://vulnerability.circl.lu/vuln/ghsa-86x4-hjp8-8h99 GHSA-86x4-hjp8-8h99 2026-10-04T11:21:43.832332+00:00

OpenAM before 16.1.3 contains an improper authorization vulnerability that allows delegated administrators to destroy sessions outside their realms because realm checks use the requester's realm. Authenticated accounts holding the iplanet-am-session-destroy-sessions attribute can supply a target session identifier or handle to forcibly log out users in any realm.