Vulnerability Details CVE-2018-0696
OpenAM (Open Source Edition) 13.0 and later does not properly manage sessions, which allows remote authenticated attackers to change the security questions and reset the login password via unspecified vectors.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.011
EPSS Ranking 60.0%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 3.5
References
Products affected by CVE-2018-0696
-
cpe:2.3:a:osstech:openam:13.0
-
cpe:2.3:a:osstech:openam:13.0.0
-
cpe:2.3:a:osstech:openam:13.0.0-120
-
cpe:2.3:a:osstech:openam:13.0.0-73