EUVD-2019-4958

Malware in sbrugna...

EUVD-2019-4957

Malware in sbrugna...

CVE-2019-13496

One Identity Cloud Access Manager before 8.1.4 Hotfix 1 allows OTP bypass via vectors involving a man in the middle, the One Identity Defender product, and replacing a failed SAML response with a successful SAML response...

CVE-2019-13497

One Identity Cloud Access Manager before 8.1.4 Hotfix 1 allows CSRF for logout requests...

PT-2019-13370

Name of the Vulnerable Software and Affected Versions One Identity Cloud Access Manager versions prior to 8.1.4 Hotfix 1 Description The issue allows for Cross-Site Request Forgery CSRF attacks on logout requests. Recommendations For versions prior to 8.1.4 Hotfix 1, update to version 8.1.4 Hotfi...

PT-2019-13369

Name of the Vulnerable Software and Affected Versions One Identity Cloud Access Manager versions prior to 8.1.4 Hotfix 1 Description The issue allows for OTP bypass through vectors involving a man-in-the-middle attack, utilizing the One Identity Defender product. This is achieved by replacing a...

CVE-2019-13496: Improper Validation of Integrity Check Value

One Identity Cloud Access Manager before 8.1.4 Hotfix 1 allows OTP bypass via vectors involving a man in the middle, the One Identity Defender product, and replacing a failed SAML response with a successful SAML response...

CVE-2019-13497: Cross-Site Request Forgery (CSRF)

One Identity Cloud Access Manager before 8.1.4 Hotfix 1 allows CSRF for logout requests...

CVE-2019-13498

One Identity Cloud Access Manager 8.1.3 does not use HTTP Strict Transport Security HSTS, which may allow man-in-the-middle MITM attacks. This issue is fixed in version 8.1.4...

CVE-2019-13498: Cleartext Transmission of Sensitive Information

One Identity Cloud Access Manager 8.1.3 does not use HTTP Strict Transport Security HSTS, which may allow man-in-the-middle MITM attacks. This issue is fixed in version 8.1.4...