Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2022-24669

Anonymous users can register / de-register for configuration change notifications

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ForgeRock

Description

It may be possible to gain some details of the deployment through a well-crafted attack. This may allow that data to be used to probe internal network services.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ForgeRock Access Management

  • unspecified to < 6.5.5affected
  • unspecified to < 7.1.2affected
  • unspecified to < 7.2.0affected

References