OpenAM Security Advisory #201503
ecurity vulnerabilities have been discovered in OpenAM components including the Core Server. These issues are present in versions of OpenAM including 12.0.0, 11.0.x, 10.1.0-Xpress, 10.0.x, 9.x, and possibly previous versions.
This advisory provides guidance on how to ensure your deployments can be secured. Workarounds or patches are available for all of the issues, which are also included in the 11.0.3 release.
Read more at – OpenAM Security Advisory #201503