Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:openam:openam:*:*:*:*:*:*:*:*

1 brief RSS
critical advisory

OpenAM: Unauthenticated information disclosure via Liberty ID-FF (CVE-2026-123551)

OpenAM versions 14.0.0 through 16.1.3 contain an information disclosure vulnerability that allows unauthenticated attackers to hijack sessions by capturing iPlanetDirectoryPro tokens via WebSocket endpoints.

PoC OpenAM
2t 1c