{
  "Name": "ForgeRock AM RCE (CVE-2021-35464)",
  "Description": "This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.",
  "Product": "ForgeRock AM",
  "Homepage": "https://backstage.forgerock.com/knowledge/",
  "DisclosureDate": "2021-06-24",
  "Author": "go0p",
  "GobyQuery": "app=\"OpenAM\"",
  "Level": "3",
  "Impact": "This vulnerability does not require identity authentication, does not require any user interaction, and the attack cost is low. At the same time, because it is a key border identity authentication service, once it is attacked, it will lead to very serious consequences and extremely valuable.",
  "Recommandation": "",
  "References": [
    "https://nosec.org/home/detail/4783.html",
	"https://backstage.forgerock.com/knowledge/kb/article/a47894244"
  ],
  "HasExp": true,
  "ExpParams": [
    {
      "Name": "AttackType",
      "Type": "select",
      "Value": "goby_shell_linux"
    }
  ],
  "ExpTips": {
    "Type": "",
    "Content": ""
  },
  "ScanSteps": [
    "AND"
  ],
  "ExploitSteps": null,
  "Tags": [
    "RCE"
  ],
  "CVEIDs": ["CVE-2021-35464"],
  "CVSSScore": "8.9",
  "AttackSurfaces": {
    "Application": ["OpenAM"],
    "Support": null,
    "Service": null,
    "System": null,
    "Hardware": null
  }
}