Management

HackTheBox

Task: HTB Linux machine hiding a ForgeRock/OpenIdentityPlatform OpenAM SSO behind a wildcard vhost. Solution: vhost fuzzing reveals sso.management.htb; jato.clientSession deserialization (CVE-2026-33439) gives pre-auth RCE via a TemplatesImpl gadget; OpenAM keystore + GLPI database secrets decrypt to owen's Linux password; rdiff-backup sudo argument injection (CVE-2022-40093) mirrors /root.