Description
The NT auth module in OpenAM before 14.6.6 allows a "replace Samba username attack."
Remediation
References
https://github.com/OpenIdentityPlatform/OpenAM/compare/14.6.5...14.6.6
https://github.com/OpenIdentityPlatform/OpenAM/pull/514
https://github.com/OpenIdentityPlatform/OpenAM/releases/tag/14.6.6
Related Vulnerabilities
CVE-2014-9635 Vulnerability in maven package org.jenkins-ci.main:jenkins-core
CVE-2018-11647 Vulnerability in npm package oauth2orize-fprm
CVE-2020-5258 Vulnerability in npm package dojo
CVE-2021-23555 Vulnerability in npm package vm2
CVE-2020-15232 Vulnerability in maven package org.mapfish.print:print-standalone