---
id: 5481
title: "Pre-auth RCE in ForgeRock OpenAM (CVE-2021-35464)"
cve: CVE-2021-35464
source_domain: portswigger.net
source_url: "https://portswigger.net/research/pre-auth-rce-in-forgerock-openam-cve-2021-35464"
published_at: "2021-06-29T18:15:00Z"
tags: ["bug-bounty", "rce", "deserialization", "java-security", "forgerock-openam", "cve-2021-35464", "pre-auth-rce", "ysoserial"]
phying_url: "https://phying.com/item/5481"
lang: en
---

# Pre-auth RCE in ForgeRock OpenAM (CVE-2021-35464)

## Summary

A pre-auth RCE in ForgeRock OpenAM via unsafe deserialization in its Jato framework: the jato.pageSession parameter accepted Java objects exploitable with a custom ysoserial chain (CVE-2021-35464).

## Intelligence Metadata

- **Sources:** portswigger.net
- **CVE:** CVE-2021-35464
- **Published:** 2021-06-29T18:15:00Z
- **Original:** https://portswigger.net/research/pre-auth-rce-in-forgerock-openam-cve-2021-35464
- **Phying News:** https://phying.com/item/5481