CVE-2023-22320

Summary

OpenAM Web Policy Agent (OpenAM Consortium Edition) provided by OpenAM Consortium parses URLs improperly, leading to a path traversal vulnerability(CWE-22). Furthermore, a crafted URL may be evaluated incorrectly.

Affected Software

Weaknesses

• CWE-22: CWE-22: Path Traversal

ADP Enrichment

CVE Program Container

Additional References

• https://github.com/openam-jp/web-agents/issues/3
• https://jvn.jp/en/vu/JVN91740661/

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://github.com/openam-jp/web-agents/issues/3
• https://jvn.jp/en/vu/JVN91740661/

• ←Previous
• Next→