Hacking Two Automakers: ForgeRock Path Confusion, RCE, and Remote Vehicle Access

Security researchers Shubham Shah and Sam Curry discovered a vulnerability chain affecting two automakers' customer login platforms built on ForgeRock. By exploiting path confusion between the WAF, web server, and identity management components, the researchers achieved remote code execution and accessed production OpenIDM servers. This enabled them to modify customer credentials, generate valid mobile app sessions, and gain remote control over connected vehicles. Open article →