ACSC: Australian organizations compromised through ForgeRock vulnerability
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2021-35464 | Java Deserialization RCE in ForgeRock Access Management (AM) | 9.8 | 100% | KEVRansomwarePoC ×3 | KEV |
From the original article
1 min read at therecord.media
Australia's main cyber-security agency said on Friday that it identified a number of Australian organizations that have been compromised through the exploitation of a vulnerability in ForgeRock OpenAM, an open-source application used by large corporations as an identity access management solution across internal applications.
therecord.media
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.