PT-2026-139831

CVE-2026-123550

Published

2026-11-08

Updated

2026-11-08

Description by

CVSS 3.1

9.8

Critical

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions OpenAM versions prior to 16.1.4

Description An authentication bypass exists in the SAML v2.0 service provider. The system accepts unsigned assertions on the ECP (PAOS) and HTTP-Artifact bindings when the WantAssertionsSigned variable is set to false. This allows unauthenticated remote attackers to submit forged assertions to obtain sessions as any mapped user, including administrators, and hijack single sign-on access to dependent applications.

Recommendations Update OpenAM to version 16.1.4 or later.

Exploitability

Exploit

Fix

Impacts

Researchers