CVE-2023-0582

CRITICAL 9.8CVE-2023-0582 · Published 27/03/2024 · updated 17/06/2026

In short

CVE-2023-0582 is a CRITICAL (CVSS 9.8) vulnerability affecting access management (forgerock).
Chance of exploitation in the next 30 days (EPSS): 0.78%, higher than 55.9% of all vulnerabilities.
Fix: update to 7.1.4 or later.

Package	Affected versions	Patched versions
access management forgerock	`= 7.2.0< 7.1.4`	`7.1.4`

Description

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ForgeRock Access Management allows Authorization Bypass. This issue affects access management: before 7.3.0, before 7.2.1, before 7.1.4, through 7.0.2.

References

backstage.forgerock.com/downloads/browse/am/featured · Product
backstage.forgerock.com/knowledge/kb/article/a64088600 · Vendor Advisory

More vulnerabilities in access management

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

access management

forgerock

= 7.2.0< 7.1.4

7.1.4

More vulnerabilities in access management

See all →