Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
In OpenIDM through 4.0.0 before 4.5.0, the info endpoint may leak sensitive information upon a request by the "anonymous" user, as demonstrated by responses with a 200 HTTP status code and a JSON object containing IP address strings. This is related to a missing access-control check in bin/defaults/script/info/login.js.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ForgeRock OpenIDM info endpoint 信息泄露漏洞
Vulnerability Description
ForgeRock OpenIDM是美国ForgeRock公司的一套可扩展的用于管理身份生命周期和供应问题的身份认证管理工具。info endpoint是其中的一个信息终端。 ForgeRock OpenIDM 4.0.0及之前的版本和4.5.0版本中的info endpoint存在安全漏洞。攻击者可通过发送请求利用该漏洞获取敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A