CVE-2017-10873

OpenAM (Open Source Edition) allows an attacker to bypass authentication and access unauthorized contents via unspecified vectors

published November 2, 2017

CVSS
—
EPSS
3%
Percentile
85.3
In the wild
Unconfirmed
What it is

OpenAM (Open Source Edition) allows an attacker to bypass authentication and access unauthorized contents via unspecified vectors. Note that this vulnerability affects OpenAM (Open Source Edition) implementations configured as SAML 2.0IdP, and switches authentication methods based on AuthnContext requests sent from the service provider.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02625 · 85.3th percentile
Published
2017-11-02T15:00Z
EPSS history
Timeline
  • 02 NOV 15:00Z
    OpenAM (Open Source Edition) allows an attacker to bypass authentication and access unauthorized contents via unspecified vectors
    cvelistv5