Vulnerability Details CVE-2018-0696
OpenAM (Open Source Edition) 13.0 and later does not properly manage sessions, which allows remote authenticated attackers to change the security questions and reset the login password via unspecified vectors.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 47.9%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 3.5
References
Products affected by CVE-2018-0696
-
cpe:2.3:a:osstech:openam:13.0
-
cpe:2.3:a:osstech:openam:13.0.0
-
cpe:2.3:a:osstech:openam:13.0.0-120
-
cpe:2.3:a:osstech:openam:13.0.0-73