~ / search / GHSA-xq73-fvmr-jvmm

GHSA-xq73-fvmr-jvmm

OpenAM Authentication Bypass via MSISDN LDAP Injection

Source: GitHub Advisory Database (reviewed) High CVE-2026-46619

Packages

EcosystemPackageAffectedFixed in
Maven org.openidentityplatform.openam:openam-auth-msisdn < 16.1.1 16.1.1

Details

As written in the advisory (Markdown source, shown as plain text).

## Summary **Description** An LDAP Injection (CWE-90) vulnerability in the MSISDN authentication module allows an unauthenticated, remote attacker to obtain an arbitrary OpenAM session without a password in the default trusted gateway configuration. This impacts OpenAM Community Edition through version 16.0.6. This issue was patched in version 16.1.1. ## Impact OpenAM deployments through version 16.0.6 that have MSISDN enabled are potentially affected. This enables a pre-authentication login bypass for any realm where an MSISDN module instance is enabled in an authentication chain and reachable through the trusted-gateway list, which allows all traffic by default. The request-supplied MSISDN value was concatenated directly into an LDAP search filter. The resulting OpenAM session is a normal authenticated session for the matched user. ## Patch This has been patched in OpenAM Community Edition version 16.1.1. Users are encouraged to update to the latest release.

References

External links from the advisory. They lead to third-party sites.