Vulnerabilidades de forgerock (CVE)

ForgeRock Access Management (AM) Core Server Remote Code Execution Vulnerability

ForgeRock AM server before 7.0 has a Java deserialization vulnerability in the jato.pageSession parameter on multiple pages. The exploitation does not require authentication, and remote code execution can be triggered by sending a single crafted /ccversion/* …