CyberRota Analysis
AI-GeneratedOpenAM versions prior to 16.1.1 are vulnerable due to the default configuration of the iPlanetDirectoryPro SSO cookie, which lacks HttpOnly protection and a SameSite attribute. This flaw allows attackers to exploit cross-site scripting (XSS) vulnerabilities to read and reuse the cookie, potentially hijacking user sessions and executing unauthorized consent grants. Organizations using OpenAM should prioritize upgrading to version 16.1.1 to mitigate this high-severity risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, the default configuration initializes the iPlanetDirectoryPro SSO cookie with HttpOnly disabled and without a protective SameSite default, and OAuth and OpenID Connect consent flows reuse that cookie through CsrfProtection as a CSRF token. When combined with same-origin cross-site scripting and a user following an attacker-controlled link, the cookie can be read and reused to steal the SSO session and complete attacker-driven consent grants. This issue is fixed in version 16.1.1.