CVE-2017-7590

概要

参考情報

• rootlabs.com.br/forgerock-persistent-and-reflected-cross-site-scripting-xss · Exploit
• securityfocus.com/bid/98044
• backstage.forgerock.com/knowledge/kb/article/a92936505 · Mitigation

openidm のその他の脆弱性

• CVE-2017-7591中 6.1OpenIDM through 4.0.0 and 4.5.0 is vulnerable to reflected cross-site scripting (XSS) attacks within the Admin UI, as demonstrated by the _s…
• CVE-2017-7589中 6.5In OpenIDM through 4.0.0 before 4.5.0, the info endpoint may leak sensitive information upon a request by the "anonymous" user, as demonstra…