Default OpenIDM admin password let researchers unlock and start cars
Two unnamed brands fixed the consoles in about two hours; a permitted test also exposed location and telemetry.
Stories per day · 30 days
Relatedconnected-cars3default-credentials2openidm2account-takeover1android1automotive1path-traversal1ping-identity1remote-code-execution1waf-bypass1
2 stories, newest first · one card per story
Stories tagged #forgerock
Researchers remotely commanded cars through two automakers’ Android apps
Chains used ForgeRock defaults and WAF path-traversal bypasses; both unnamed automakers patched within two hours of disclosure.