| Package | Affected versions | Patched versions |
|---|---|---|
| access management | < 5.5.0 | 5.5.0 |
The REST APIs in ForgeRock AM before 5.5.0 include SSOToken IDs as part of the URL, which allows attackers to obtain sensitive information by finding an ID value in a log file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free