OpenIAM Workforce Identity

• CVE-2020-13422 ↗HIGH 8.12021

  OpenIAM before 4.2.0.3 does not verify if a user has permissions to perform /webconsole/rest/api/* administrative actions.

• CVE-2020-13421 ↗CRITICAL 9.82021

  OpenIAM before 4.2.0.3 has Incorrect Access Control for the Create User, Modify User Permissions, and Password Reset actions.

• CVE-2020-13420 ↗CRITICAL 9.82021

  OpenIAM before 4.2.0.3 allows remote attackers to execute arbitrary code via Groovy Script.

• CVE-2020-13419 ↗MEDIUM 5.32021

  OpenIAM before 4.2.0.3 allows Directory Traversal in the Batch task.

• CVE-2020-13418 ↗MEDIUM 6.12021

  OpenIAM before 4.2.0.3 allows XSS in the Add New User feature.

No datasheets, whitepapers, case studies, videos, or demos linked yet.

• 1Password Extended Access Management · 1Password
• AD Guardian Cloud · CionSystems
• ARCON Privileged Access Management · ARCON
• Abbey Labs · Abbey Labs
• Aceiss · Aceiss
• Active Directory Permissions Analyzer · Paramount Defenses
• Adaptive MFA · Okta
• Adaxes · softerra adaxes