2 lines
6.1 KiB
JSON
2 lines
6.1 KiB
JSON
{"affected":[{"affectedData":[{"product":"Access Management","vendor":"ForgeRock","versions":[{"lessThan":"7.1.1","status":"affected","version":"7.1","versionType":"custom"},{"lessThan":"6.5.4","status":"affected","version":"6.5","versionType":"custom"}]}],"source":"psirt@forgerock.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:forgerock:access_management:5.5.2:*:*:*:*:*:*:*","matchCriteriaId":"81409362-E21B-4956-BE64-7A07188DDB77","vulnerable":true},{"criteria":"cpe:2.3:a:forgerock:access_management:6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"F11F7FD9-9FB7-472F-B4CA-E2EBF3930051","vulnerable":true},{"criteria":"cpe:2.3:a:forgerock:access_management:6.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"3A2E2315-212A-4652-84D9-3E962FB97238","vulnerable":true},{"criteria":"cpe:2.3:a:forgerock:access_management:6.0.0.2:*:*:*:*:*:*:*","matchCriteriaId":"17E11560-BB97-4A62-B6FE-004E9CD7AABC","vulnerable":true},{"criteria":"cpe:2.3:a:forgerock:access_management:6.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"53CC11DF-351C-4412-B44B-DDA7A9229812","vulnerable":true},{"criteria":"cpe:2.3:a:forgerock:access_management:6.0.0.4:*:*:*:*:*:*:*","matchCriteriaId":"61C0168C-C23E-4282-8CE4-557624BAC52B","vulnerable":true},{"criteria":"cpe:2.3:a:forgerock:access_management:6.0.0.6:*:*:*:*:*:*:*","matchCriteriaId":"029858A3-5920-41FA-96A9-5973802C4995","vulnerable":true},{"criteria":"cpe:2.3:a:forgerock:access_management:6.0.0.7:*:*:*:*:*:*:*","matchCriteriaId":"43A69DFF-405B-4869-A570-C39521262D94","vulnerable":true},{"criteria":"cpe:2.3:a:forgerock:access_management:6.5.0:*:*:*:*:*:*:*","matchCriteriaId":"8B8556CA-F9C8-4DF8-8951-EB58CE02A639","vulnerable":true},{"criteria":"cpe:2.3:a:forgerock:access_management:6.5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"37945318-07E9-4E2E-B71E-0DD7F5630571","vulnerable":true},{"criteria":"cpe:2.3:a:forgerock:access_management:6.5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"7480E543-6823-4E2E-AEDD-A9BC21609E89","vulnerable":true},{"criteria":"cpe:2.3:a:forgerock:access_management:6.5.1:*:*:*:*:*:*:*","matchCriteriaId":"E31AD7C7-9145-4EBC-A1A1-531B77BEFB0C","vulnerable":true},{"criteria":"cpe:2.3:a:forgerock:access_management:6.5.2.1:*:*:*:*:*:*:*","matchCriteriaId":"C1431E8B-A15E-4ED9-97D9-7E9226C23863","vulnerable":true},{"criteria":"cpe:2.3:a:forgerock:access_management:6.5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"E78929D6-90B5-4FB2-BCA0-327D69D85C66","vulnerable":true},{"criteria":"cpe:2.3:a:forgerock:access_management:6.5.2.3:*:*:*:*:*:*:*","matchCriteriaId":"EE525AD5-4B68-4063-A183-FA63B9EC7FF7","vulnerable":true},{"criteria":"cpe:2.3:a:forgerock:access_management:6.5.3:*:*:*:*:*:*:*","matchCriteriaId":"F3D7F2DE-8E77-4268-9F8B-D95954A31140","vulnerable":true},{"criteria":"cpe:2.3:a:forgerock:access_management:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"133B3A99-A25A-46A7-8663-282B7146E33C","vulnerable":true},{"criteria":"cpe:2.3:a:forgerock:access_management:7.0.1:*:*:*:*:*:*:*","matchCriteriaId":"0054E664-0BB8-49B9-8793-03C26873F139","vulnerable":true},{"criteria":"cpe:2.3:a:forgerock:access_management:7.0.2:*:*:*:*:*:*:*","matchCriteriaId":"93E6DB1C-1085-4F63-9FA5-19D3E8B80A34","vulnerable":true},{"criteria":"cpe:2.3:a:forgerock:access_management:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"9725E909-8707-402E-939B-EC6FA6FA0984","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"Missing access control in ForgeRock Access Management 7.1.0 and earlier versions on all platforms allows remote unauthenticated attackers to hijack sessions, including potentially admin-level sessions. This issue affects: ForgeRock Access Management 7.1 versions prior to 7.1.1; 6.5 versions prior to 6.5.4; all previous versions."},{"lang":"es","value":"Una falta de control de acceso en ForgeRock Access Management versión 7.1.0 y versiones anteriores, en todas las plataformas permite a atacantes remotos no autenticados secuestrar sesiones, incluyendo potencialmente sesiones a nivel de administrador. Este problema afecta a: ForgeRock Access Management versiones 7.1 anteriores a 7.1.1; versiones 6.5 anteriores a 6.5.4; todas las versiones anteriores"}],"id":"CVE-2021-4201","lastModified":"2026-06-17T04:19:12.530","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"HIGH","cvssData":{"accessComplexity":"LOW","accessVector":"NETWORK","authentication":"NONE","availabilityImpact":"PARTIAL","baseScore":7.5,"confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","version":"2.0"},"exploitabilityScore":10.0,"impactScore":6.4,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.6,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":6.0,"source":"psirt@forgerock.com","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2022-02-14T22:15:07.830","references":[{"source":"psirt@forgerock.com","tags":["Patch","Vendor Advisory"],"url":"https://backstage.forgerock.com/knowledge/kb/article/a50037155#x7ZPA0"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"url":"https://backstage.forgerock.com/knowledge/kb/article/a50037155#x7ZPA0"}],"sourceIdentifier":"psirt@forgerock.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-284"}],"source":"psirt@forgerock.com","type":"Secondary"},{"description":[{"lang":"en","value":"CWE-287"}],"source":"nvd@nist.gov","type":"Primary"}]}
|