writeups.xyz / Pre-auth RCE in ForgeRock OpenAM (CVE-2021-35464)

Submitter : c2a

Date: 29 June 2021

Bounty : undisclosed

Vulnerabilities :

• RCE
• Insecure Deserialization

Programs :

• Undisclosed

Authors :

• Michael Stepankin (@Artsploit)

Link :
https://portswigger.net/research/pre-auth-rce-in-forgerock-openam-cve-2021-35464