CVE-2026-45048High· 8.5▾ TwilightOpen Access Management (OpenAM) is an access management solution. Prior to 16.1.1, SessionRequestHandler in the session management endpoint does not enforce ownership or privilege checks when a low-privileged authenticated user queries s…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 46.8 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Sep 15.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
0.4%
Last analysed / modified upstream
Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, SessionRequestHandler in the session management endpoint does not enforce ownership or privilege checks when a low-privileged authenticated user queries session information in deployments using stateful session storage. A requester who knows a target identity identifier can retrieve another user's active session credentials, including credentials for a more privileged account, and use them to hijack that session. This issue is fixed in version 16.1.1.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Affected packages:
org.openidentityplatform.openam:openam-core <= 16.0.6Patched in:
org.openidentityplatform.openam:openam-core 16.1.1Connected by shared product, vendor, weakness, or advisory.
CVE-2026-48717Critical· 9.1Open Access Management (OpenAM) is an access management solution
CVE-2026-45052Critical· 9.3Open Access Management (OpenAM) is an access management solution
CVE-2026-53660High· 7.4Open Access Management (OpenAM) is an access management solution
CVE-2026-47424High· 7.5Open Access Management (OpenAM) is an access management solution
CVE-2026-47426High· 7.6Open Access Management (OpenAM) is an access management solution
CVE-2026-41573High· 7.1Open Access Management (OpenAM) is an access management solution