CVE-2017-10873 OpenAM (Open Source Edition) allows an attacker to bypass authentication and access unauthorized contents via unspecified vectors.

What is CVE-2017-10873?

CVE-2017-10873 is a high-severity vulnerability in OpenAM, published on 2 Nov 2017.

Official description

OpenAM (Open Source Edition) allows an attacker to bypass authentication and access unauthorized contents via unspecified vectors. Note that this vulnerability affects OpenAM (Open Source Edition) implementations configured as SAML 2.0IdP, and switches authentication methods based on AuthnContext requests sent from the service provider.

Weakness: CWE-287

Which versions are affected by CVE-2017-10873?

It affects 1 product.

Products include Osstech Openam.

How do I fix CVE-2017-10873?

No fix has been published for CVE-2017-10873 yet. Limit exposure of the affected software until one is available.

Is CVE-2017-10873 being exploited?

There is no known exploitation of CVE-2017-10873 in the wild and no public exploit code.

Other vulnerabilities in OpenAM

• CVE-2018-0696 Business logic in OpenAM High 7.5
• CVE-2022-31735 Open redirect in OpenAM (OpenAM Consortium Edition) Medium 6.1
• CVE-2019-5915 Open redirect in OpenAM (Open Source Edition) Medium 6.1

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-4rxj-vw6j-qqrf, UBUNTU-CVE-2017-10873.