CVE-2023-0339

—

CVSS 3.1

9.8 critical

EPSS

<1%p60

Published

Feb 28, 2023 (Feb 28, 2023)

Modified

Jun 17, 2026

Description

Relative Path Traversal vulnerability in ForgeRock Access Management Web Policy Agent allows Authentication Bypass. This issue affects Access Management Web Policy Agent: all versions up to 5.10.1

Vendors: forgerock
Products: web policy agents
Weakness: CWE-23, CWE-22
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.0%)

In the news0 stories

No ingested article mentions this CVE yet.