CVE:CVE-2017-14394
CNNVD:CNNVD-201709-438
ForgeRock Access Management (OpenAM) 13.5.0版本至13.5.1版本和Access Management (AM) 5.0.0版本至5.1.1版本中的OAuth 2.0 Authorization Server存在输入验证错误漏洞。该漏洞源于网络系统或产品未对输入的数据进行正确的验证。
solution:Upgrade forgerock access_management to a higher version than 5.1.1,and avoid the version [5.0.0,5.1.1]; Upgrade forgerock openam to a higher version than 13.5.1,and avoid the version [13.5.0,13.5.1]