Security researchers Shubham Shah and Sam Curry discovered a critical vulnerability chain in ForgeRock identity management servers used by two unnamed automobile manufacturers. The attack let them bypass Web Application Firewall (WAF) protections, achieve Remote Code Execution (RCE) on production servers, and access customer accounts. With this access, researchers could remotely track vehicles, unlock doors, […]
This article has been indexed from GBHackers Security | #1 Globally Trusted Cyber Security News Platform
Read the original article:
Hackers Exploit ForgeRock WAF Bypass and RCE to Remotely Unlock and Start Cars From Two Automakers