Curated security research, vulnerabilities, advisories and tools for practitioners.

← back | CVE Intelligence

CVE-2021-35464

Curated 1 security research writeups, vulnerability advisories and exploitation analyses for CVE-2021-35464.

Coverage Span: 2021-06-29
Reports: 1 related reports

Associated Reports & Timeline

Pre-auth RCE in ForgeRock OpenAM (CVE-2021-35464)

A pre-auth RCE in ForgeRock OpenAM via unsafe deserialization in its Jato framework: the jato.pageSession parameter accepted Java objects exploitable with a custom ysoserial chain (CVE-2021-35464).