Vulnerability Details CVE-2018-0696
OpenAM (Open Source Edition) 13.0 and later does not properly manage sessions, which allows remote authenticated attackers to change the security questions and reset the login password via unspecified vectors.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 49.5%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 3.5
References
Products affected by CVE-2018-0696
-
cpe:2.3:a:osstech:openam:13.0
-
cpe:2.3:a:osstech:openam:13.0.0
-
cpe:2.3:a:osstech:openam:13.0.0-120
-
cpe:2.3:a:osstech:openam:13.0.0-73