~ / search / GHSA-px3r-27qc-hx5g

GHSA-px3r-27qc-hx5g

NT auth module vulnerability in OpenAM

Source: GitHub Advisory Database (reviewed) Moderate CVE-2022-34298

Packages

EcosystemPackageAffectedFixed in
Maven org.openidentityplatform.openam:openam-core < 14.6.6 14.6.6

Details

As written in the advisory (Markdown source, shown as plain text).

The NT auth module in OpenAM before 14.6.6 allows a "replace Samba username attack."

References

External links from the advisory. They lead to third-party sites.