PT-2022-22114 · Openiam · Openam
CVSS v3.1
5.3
Medium
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
OpenAM versions prior to 14.6.6
Description
The NT auth module in OpenAM allows a "replace Samba username attack." This issue may potentially be exploited to bypass authentication mechanisms.
Recommendations
For versions prior to 14.6.6, update to version 14.6.6 or later to resolve the issue. As a temporary workaround, consider restricting access to the NT auth module until a patch is applied.
Exploit
Fix
Incorrect Authorization
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Openam