CVE-2022-31735

OpenAM Consortium Edition version 14.0.0 provided by OpenAM Consortium contains an open redirect vulnerability (CWE-601). When accessing an affected server through some specially crafted URL, the user may be redirected to an arbitrary website.

Score

CVSS 3.1 6.1 Medium

Status

Modified - vultures@jpcert.or.jp

Published

2022-09-15

Last modified

2024-08-03

Weaknesses

CWE-601

Affected products

• Openam Openam Consortium Edition (Openam Consortium)
• Openam (Osstech)

References

• https://github.com/openam-jp/openam/issues/259
• https://jvn.jp/en/vu/JVNVU99326969/