ForgeRock Access Management (AM) 6.5.2.1
Approved changes feed: RSS · Atom
cpe:2.3:a:forgerock:access_management:6.5.2.1:*:*:*:*:*:*:*
part: a version: 6.5.2.1 update: *
| Vendor | Forgerock (62f6869f-1355-5abb-ba20-0a0692140c41) |
|---|---|
| Product | Access Management (714c1040-7f28-55b8-9936-e06559c01799) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-4201 |
vulnerable | 2026-06-03 14:45:47.990471 |
Pre-authentication session hijacking
CRITICAL (9.6)
Missing access control in ForgeRock Access Management 7.1.0 and earlier versions on all platforms allows remote unauthenticated attackers to hijack sessions, including potentially admin-level sessions. This issue affects: ForgeRock Access Management 7.1 versions prior to 7.1.1; 6.5 versions prior to 6.5.4; all previous versions.
Published: 2022-02-14T21:04:29.132Z
Updated: 2025-04-14T17:03:52.274Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.