[Japanese]

JVNDB-2023-001002

OpenAM Web Policy Agent (OpenAM Consortium Edition) vulnerable to path traversal

Overview

OpenAM Web Policy Agent (OpenAM Consortium Edition) provided by OpenAM Consortium parses URLs improperly, leading to a path traversal vulnerability (CWE-22).
Furthermore, a crafted URL may be evaluated incorrectly.

OpenAM Consortium reported this vulnerability to JPCERT/CC to notify users of its solution through JVN.
JPCERT/CC and OpenAM Consortium coordinated under the Information Security Early Warning Partnership.
CVSS Severity (What is CVSS?)

CVSS V3 Severity:
Base Metrics 7.5 (High) [Other]
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Scope: Unchanged
  • Confidentiality Impact: High
  • Integrity Impact: None
  • Availability Impact: None
CVSS V2 Severity:
Base Metrics 5.0 (Medium) [Other]
  • Access Vector: Network
  • Access Complexity: Low
  • Authentication: None
  • Confidentiality Impact: Partial
  • Integrity Impact: None
  • Availability Impact: None
Affected Products


OpenAM Consortium
  • OpenAM Web Policy Agent (OpenAM Consortium Edition) version 4.1.0

Impact

Arbitrary files outside the document root on the server may be accessed by an attacker.
A protected resource may be accessed via some crafted URL.
Solution

[Apply Patches]
Apply the appropriate patches according to the information provided by the developer.

[Apply Workaround]
Detect and drop malicious requests using WAF (Web Application Firewall) or IPS (Intrusion Prevention System).
Vendor Information

OpenAM Consortium
CWE (What is CWE?)

  1. Path Traversal(CWE-22) [Other]
CVE (What is CVE?)

  1. CVE-2023-22320
References

  1. JVN : JVNVU#91740661
Revision History

  • [2023/01/11]
      Web page was published

Date Public2023/01/10
Date First Published2023/01/11
Date Last Updated2023/01/11