| Package | Affected versions | Patched versions |
|---|---|---|
| openam | ≥ 13.0, ≤ 13.0.0-120 |
OpenAM (Open Source Edition) 13.0 and later does not properly manage sessions, which allows remote authenticated attackers to change the security questions and reset the login password via unspecified vectors.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free