description: OpenAM Web Policy Agent (OpenAM Consortium Edition) provided by OpenAM Consortium parses URLs improperly, leading to a path traversal vulnerability(CWE-22). Furthermore, a crafted URL may be evaluated incorrectly.
problem types: CWE-22: Path Traversal
affected:
{
vendor: OpenAM consortium
product: OpenAM Web Policy Agent (OpenAM Consortium Edition)
versions:
version: 4.1.0, status: affected
}