CVE-2022-34298: Openidentityplatform Openam

Medium severity, CVSS 5.3. EPSS: 3.2% chance of exploitation in the next 30 days.

The NT auth module in OpenAM before 14.6.6 allows a "replace Samba username attack."

Affected products

• Openidentityplatform Openam: before 14.6.6 (fixed in 14.6.6)

Published 2022-06-23. Last modified 2026-06-17.