Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
In ForgeRock Access Management (AM) before 7.0.2, the SAML2 implementation allows XML injection, potentially enabling a fraudulent SAML 2.0 assertion.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ForgeRock Access Management 安全漏洞
Vulnerability Description
Forgerock ForgeRock Access Management是美国ForgeRock（Forgerock）公司的一个全面、统一的解决方案，旨在快速实现根据用户和员工的独特需求量身定制的卓越体验。 ForgeRock Access Management（AM）7.0.2之前之前版本存在安全漏洞，该漏洞源于SAML2实现允许XML注入，这可能导致SAML2.0欺诈性使用。
CVSS Information
N/A
Vulnerability Type
N/A