777: AM Security Advisory #202106 patch - Githubissues

OpenBankingToolkit / openbanking-reference-implementation

ForgeRock OpenBanking Reference Implementation is an example of how you can bundle all the micro-services together to create an Open Banking eco-system

Apache License 2.0

7 stars 4 forks source link

777: AM Security Advisory #202106 patch #460

Closed jsanhc closed 3 years ago

jsanhc commented 3 years ago

Only affects local environments, isn't necessary release it

New local OpenAM builded with security patches
Docker compose files updated
AM DockerFile updated to delete the old patch, we not need a patch anymore
Readme file updated with new information Issue: https://github.com/ForgeCloud/ob-deploy/issues/777

Description

Backstage reference

#202106
- Issue #202106-01: XML injection vulnerability
- Issue #202106-02: Broken Authentication
- Issue #202106-03: Account Enumeration

Impacted Areas in Application

List general components of the application that this PR will affect:

OpenAM local environment