CVEvulnerability

CVE-2026-45049

8.3 HIGH EPSS 0.33% Published 2026-10-29 Modified 2026-10-30 Official page ↗

Exploitation and prioritisation

EPSS
0.33% chance of exploitation in the next 30 days · in the top 73.5% of all CVEs (2026-11-03)
EU Vulnerability Database
EUVD-2026-113394

Affected packages

EcosystemPackageVulnerableFixed inAdvisory
Mavenorg.openidentityplatform.openam:openam-federation< 16.1.116.1.1GHSA-r9pv-5rpp-vm8g
Status
Awaiting Analysis
Published
2026-10-29
Last modified
2026-10-30
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.3 HIGH — CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
Weaknesses
CWE-201

Description

Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, the `Cross-Domain Single Sign-On` (`CDSSO`) servlet allows a logged-in user's raw OpenAM session token to be POSTed to an attacker-controlled URL. An attacker who induces an authenticated victim to visit a crafted URL can receive the session credential and potentially hijack the session. Deployments must have `CDSSO` enabled, as is common in multi-domain deployments, and exploitation is additionally gated on a non-default configuration being absent. This issue is fixed in version 16.1.1.

Related

Weakness · CWE (1)

  • CWE-201 Insertion of Sensitive Information Into Sent Data weakness

Referenced by GitHub Advisory · alias (1)

  • GHSA-r9pv-5rpp-vm8g OpenAM Unauthenticated Session Hijacking via Information Exposure in CDCServlet advisory · Maven

References