Search

Find a vulnerability

Search criteria ⓘ Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.

    3 vulnerabilities found for OpenAM by Open Source Solution Technology Corporation

    CVE-2017-10873 (GCVE-0-2017-10873)

    Vulnerability from nvd – Published: 2017-11-02 15:00 – Updated: 2024-08-05 17:50
    VLAI
    Summary
    OpenAM (Open Source Edition) allows an attacker to bypass authentication and access unauthorized contents via unspecified vectors. Note that this vulnerability affects OpenAM (Open Source Edition) implementations configured as SAML 2.0IdP, and switches authentication methods based on AuthnContext requests sent from the service provider.
    Severity
    No CVSS data available.
    CWE
    • Authentication bypass
    Assigner
    References
    URL Tags
    https://www.cs.themistruct.com/ x_refsource_MISC
    https://jvn.jp/en/jp/JVN79546124/ third-party-advisoryx_refsource_JVN
    https://www.osstech.co.jp/support/am2017-2-1-en x_refsource_MISC
    Impacted products
    Date Public
    2017-11-02 00:00
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T17:50:12.528Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.cs.themistruct.com/"
          },
          {
            "name": "JVN#97243511",
            "tags": [
              "third-party-advisory",
              "x_refsource_JVN",
              "x_transferred"
            ],
            "url": "https://jvn.jp/en/jp/JVN79546124/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.osstech.co.jp/support/am2017-2-1-en"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "OpenAM",
          "vendor": "Open Source Solution Technology Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "Open Source Edition"
            }
          ]
        }
      ],
      "datePublic": "2017-11-02T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "OpenAM (Open Source Edition) allows an attacker to bypass authentication and access unauthorized contents via unspecified vectors. Note that this vulnerability affects OpenAM (Open Source Edition) implementations configured as SAML 2.0IdP, and switches authentication methods based on AuthnContext requests sent from the service provider."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Authentication bypass",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-11-02T14:57:01.000Z",
        "orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
        "shortName": "jpcert"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.cs.themistruct.com/"
        },
        {
          "name": "JVN#97243511",
          "tags": [
            "third-party-advisory",
            "x_refsource_JVN"
          ],
          "url": "https://jvn.jp/en/jp/JVN79546124/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.osstech.co.jp/support/am2017-2-1-en"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "vultures@jpcert.or.jp",
          "ID": "CVE-2017-10873",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "OpenAM",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "Open Source Edition"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Open Source Solution Technology Corporation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "OpenAM (Open Source Edition) allows an attacker to bypass authentication and access unauthorized contents via unspecified vectors. Note that this vulnerability affects OpenAM (Open Source Edition) implementations configured as SAML 2.0IdP, and switches authentication methods based on AuthnContext requests sent from the service provider."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Authentication bypass"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.cs.themistruct.com/",
              "refsource": "MISC",
              "url": "https://www.cs.themistruct.com/"
            },
            {
              "name": "JVN#97243511",
              "refsource": "JVN",
              "url": "https://jvn.jp/en/jp/JVN79546124/"
            },
            {
              "name": "https://www.osstech.co.jp/support/am2017-2-1-en",
              "refsource": "MISC",
              "url": "https://www.osstech.co.jp/support/am2017-2-1-en"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
    "assignerShortName": "jpcert",
    "cveId": "CVE-2017-10873",
    "datePublished": "2017-11-02T15:00:00.000Z",
    "dateReserved": "2017-07-04T00:00:00.000Z",
    "dateUpdated": "2024-08-05T17:50:12.528Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

    CVE-2017-10873 (GCVE-0-2017-10873)

    Vulnerability from cvelistv5 – Published: 2017-11-02 15:00 – Updated: 2024-08-05 17:50
    VLAI
    Summary
    OpenAM (Open Source Edition) allows an attacker to bypass authentication and access unauthorized contents via unspecified vectors. Note that this vulnerability affects OpenAM (Open Source Edition) implementations configured as SAML 2.0IdP, and switches authentication methods based on AuthnContext requests sent from the service provider.
    Severity
    No CVSS data available.
    CWE
    • Authentication bypass
    Assigner
    References
    URL Tags
    https://www.cs.themistruct.com/ x_refsource_MISC
    https://jvn.jp/en/jp/JVN79546124/ third-party-advisoryx_refsource_JVN
    https://www.osstech.co.jp/support/am2017-2-1-en x_refsource_MISC
    Impacted products
    Date Public
    2017-11-02 00:00
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T17:50:12.528Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.cs.themistruct.com/"
          },
          {
            "name": "JVN#97243511",
            "tags": [
              "third-party-advisory",
              "x_refsource_JVN",
              "x_transferred"
            ],
            "url": "https://jvn.jp/en/jp/JVN79546124/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.osstech.co.jp/support/am2017-2-1-en"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "OpenAM",
          "vendor": "Open Source Solution Technology Corporation",
          "versions": [
            {
              "status": "affected",
              "version": "Open Source Edition"
            }
          ]
        }
      ],
      "datePublic": "2017-11-02T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "OpenAM (Open Source Edition) allows an attacker to bypass authentication and access unauthorized contents via unspecified vectors. Note that this vulnerability affects OpenAM (Open Source Edition) implementations configured as SAML 2.0IdP, and switches authentication methods based on AuthnContext requests sent from the service provider."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Authentication bypass",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-11-02T14:57:01.000Z",
        "orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
        "shortName": "jpcert"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.cs.themistruct.com/"
        },
        {
          "name": "JVN#97243511",
          "tags": [
            "third-party-advisory",
            "x_refsource_JVN"
          ],
          "url": "https://jvn.jp/en/jp/JVN79546124/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.osstech.co.jp/support/am2017-2-1-en"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "vultures@jpcert.or.jp",
          "ID": "CVE-2017-10873",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "OpenAM",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "Open Source Edition"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Open Source Solution Technology Corporation"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "OpenAM (Open Source Edition) allows an attacker to bypass authentication and access unauthorized contents via unspecified vectors. Note that this vulnerability affects OpenAM (Open Source Edition) implementations configured as SAML 2.0IdP, and switches authentication methods based on AuthnContext requests sent from the service provider."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Authentication bypass"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.cs.themistruct.com/",
              "refsource": "MISC",
              "url": "https://www.cs.themistruct.com/"
            },
            {
              "name": "JVN#97243511",
              "refsource": "JVN",
              "url": "https://jvn.jp/en/jp/JVN79546124/"
            },
            {
              "name": "https://www.osstech.co.jp/support/am2017-2-1-en",
              "refsource": "MISC",
              "url": "https://www.osstech.co.jp/support/am2017-2-1-en"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
    "assignerShortName": "jpcert",
    "cveId": "CVE-2017-10873",
    "datePublished": "2017-11-02T15:00:00.000Z",
    "dateReserved": "2017-07-04T00:00:00.000Z",
    "dateUpdated": "2024-08-05T17:50:12.528Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

    JVNDB-2017-000231

    Vulnerability from jvndb - Published: 2017-11-01 15:36 - Updated:2018-03-14 14:03
    Severity
    6.3 (Medium) - cvssV3_0 - CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
    Summary
    OpenAM (Open Source Edition) vulnerable to authentication bypass
    Details
    OpenAM (Open Source Edition) contains an authentication bypass vulnerability. Yasushi Iwakata of Open Source Solution Technology Corporation reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.
    References
    Impacted products
    Show details on JVN DB website
    To clipboard 

    {
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2017/JVNDB-2017-000231.html",
  "dc:date": "2018-03-14T14:03+09:00",
  "dcterms:issued": "2017-11-01T15:36+09:00",
  "dcterms:modified": "2018-03-14T14:03+09:00",
  "description": "OpenAM (Open Source Edition) contains an authentication bypass vulnerability.\r\n\r\nYasushi Iwakata of Open Source Solution Technology Corporation reported this vulnerability to IPA.\r\nJPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.",
  "link": "https://jvndb.jvn.jp/en/contents/2017/JVNDB-2017-000231.html",
  "sec:cpe": {
    "#text": "cpe:/a:open_source_solution_technology:openam",
    "@product": "OpenAM",
    "@vendor": "Open Source Solution Technology Corporation",
    "@version": "2.2"
  },
  "sec:cvss": [
    {
      "@score": "6.0",
      "@severity": "Medium",
      "@type": "Base",
      "@vector": "AV:N/AC:M/Au:S/C:P/I:P/A:P",
      "@version": "2.0"
    },
    {
      "@score": "6.3",
      "@severity": "Medium",
      "@type": "Base",
      "@vector": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
      "@version": "3.0"
    }
  ],
  "sec:identifier": "JVNDB-2017-000231",
  "sec:references": [
    {
      "#text": "http://jvn.jp/en/jp/JVN79546124/index.html",
      "@id": "JVN#79546124",
      "@source": "JVN"
    },
    {
      "#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10873",
      "@id": "CVE-2017-10873 ",
      "@source": "CVE"
    },
    {
      "#text": "https://nvd.nist.gov/vuln/detail/CVE-2017-10873",
      "@id": "CVE-2017-10873 ",
      "@source": "NVD"
    },
    {
      "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
      "@id": "CWE-287",
      "@title": "Improper Authentication(CWE-287)"
    }
  ],
  "title": "OpenAM (Open Source Edition) vulnerable to authentication bypass"
}