.. / CVE-2021-35464

• RCE
• Nuclei
• Web

Exploit for ForgeRock OpenAM <7.0 - Remote Code Execution (CVE-2021-35464)

Description:

ForgeRock AM server before 7.0 has a Java deserialization vulnerability in the jato.pageSession parameter on multiple pages. The exploitation does not require authentication, and remote code execution can be triggered by sending a single crafted /ccversion/* request to the server. The vulnerability exists due to the usage of Sun ONE Application Framework (JATO) found in versions of Java 8 or earlier.

Nuclei Template

View the template here CVE-2021-35464.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2021/CVE-2021-35464.yaml

References: