Customer IAM platform for managing external identities with SSO and MFA
by OpenIAM · openiam.com · source ↗
OpenIAM before 4.2.0.3 does not verify if a user has permissions to perform /webconsole/rest/api/* administrative actions.
OpenIAM before 4.2.0.3 has Incorrect Access Control for the Create User, Modify User Permissions, and Password Reset actions.
OpenIAM before 4.2.0.3 allows remote attackers to execute arbitrary code via Groovy Script.
No datasheets, whitepapers, case studies, videos, or demos linked yet.