AnonymousSign in
Customer IAM platform for managing external identities with SSO and MFA
by OpenIAM · openiam.com · source ↗
OpenIAM before 4.2.0.3 does not verify if a user has permissions to perform /webconsole/rest/api/* administrative actions.
OpenIAM before 4.2.0.3 has Incorrect Access Control for the Create User, Modify User Permissions, and Password Reset actions.
OpenIAM before 4.2.0.3 allows remote attackers to execute arbitrary code via Groovy Script.
OpenIAM before 4.2.0.3 allows Directory Traversal in the Batch task.
OpenIAM before 4.2.0.3 allows XSS in the Add New User feature.
No datasheets, whitepapers, case studies, videos, or demos linked yet.