PT-2020-13374

Name of the Vulnerable Software and Affected Versions Teradici Cloud Access Connector versions prior to 15 Teradici Cloud Access Connector Legacy versions prior to April 20, 2020 Description The issue allows an unauthenticated remote attacker to leak LDAP credentials via a specially crafted HTTP...

CVE-2020-13176: Improper Neutralization of Input During Web Page Generation

The Management Interface of the Teradici Cloud Access Connector and Cloud Access Connector Legacy for releases prior to April 24, 2020 v16 and earlier for the Cloud Access Connector contains a stored cross-site scripting XSS vulnerability which allows a remote unauthenticated attacker to poison l...

CVE-2020-13175: Improper Control of Filename for Include/Require Statement in PHP Program

The Management Interface of the Teradici Cloud Access Connector and Cloud Access Connector Legacy for releases prior to April 20, 2020 v15 and earlier for Cloud Access Connector contains a local file inclusion vulnerability which allows an unauthenticated remote attacker to leak LDAP credentials...

PT-2020-13375

Name of the Vulnerable Software and Affected Versions Teradici Cloud Access Connector versions prior to 16 Teradici Cloud Access Connector Legacy versions prior to April 24, 2020 Description The Management Interface contains a stored cross-site scripting XSS issue, allowing a remote unauthenticat...

Microsegmentation and Isolation: 2 Essential Strategies in Zero-Trust Security

The headlines over the past few years have been consistent – enterprises are pouring more and more money into cybersecurity countermeasures. Indications are that 2020 will be no different, with reports that nearly three quarters of CISOs plan to ask their CFOs for increased cybersecurity investme...

One Identity Cloud Access Manager Cross-Site Request Forgery Vulnerability

One Identity Cloud Access Manager CAM is a Web-based access management solution from US-based One Identity. The product supports single sign-on, multi-factor authentication, access control and auditing. A cross-site request forgery vulnerability exists in One Identity CAM versions prior to 8.1.4...

CVE-2019-13497

One Identity Cloud Access Manager before 8.1.4 Hotfix 1 allows CSRF for logout requests...

CVE-2019-13496

One Identity Cloud Access Manager before 8.1.4 Hotfix 1 allows OTP bypass via vectors involving a man in the middle, the One Identity Defender product, and replacing a failed SAML response with a successful SAML response...

CVE-2019-13496

One Identity Cloud Access Manager before 8.1.4 Hotfix 1 allows OTP bypass via vectors involving a man in the middle, the One Identity Defender product, and replacing a failed SAML response with a successful SAML response...

CVE-2019-13497

One Identity Cloud Access Manager before 8.1.4 Hotfix 1 allows CSRF for logout requests...

CVE-2019-13497

CVE-2019-13497 affects One Identity Cloud Access Manager (CAM) prior to 8.1.4 Hotfix 1. The issue is a CSRF on logout requests caused by the web application not adequately validating that requests originate from a trusted user. Consequence is that an attacker could trigger unintended logout actio...

CVE-2019-13496

CVE-2019-13496 affects One Identity Cloud Access Manager, specifically versions prior to 8.1.4 Hotfix 1. The issue enables an OTP bypass via a MITM/SSL-strip scenario involving the Defender component and manipulation of a failed SAML response, as demonstrated by public exploitation and discussion...

PT-2019-13370

Name of the Vulnerable Software and Affected Versions One Identity Cloud Access Manager versions prior to 8.1.4 Hotfix 1 Description The issue allows for Cross-Site Request Forgery CSRF attacks on logout requests. Recommendations For versions prior to 8.1.4 Hotfix 1, update to version 8.1.4 Hotfi...

PT-2019-13369

Name of the Vulnerable Software and Affected Versions One Identity Cloud Access Manager versions prior to 8.1.4 Hotfix 1 Description The issue allows for OTP bypass through vectors involving a man-in-the-middle attack, utilizing the One Identity Defender product. This is achieved by replacing a...

CVE-2019-13496: Improper Validation of Integrity Check Value

One Identity Cloud Access Manager before 8.1.4 Hotfix 1 allows OTP bypass via vectors involving a man in the middle, the One Identity Defender product, and replacing a failed SAML response with a successful SAML response...

CVE-2019-13497: Cross-Site Request Forgery (CSRF)

One Identity Cloud Access Manager before 8.1.4 Hotfix 1 allows CSRF for logout requests...

Exploit for Cross-Site Request Forgery (CSRF) in Oneidentity Cloud_Access_Manager

CVE-2019-13497 Exploit Title: Cross Site Request Forgery CSR...

Exploit for Improper Validation of Integrity Check Value in Oneidentity Cloud_Access_Manager

CVE-2019-13496 Exploit Title: OTP bypass Filed Integrity ch...

Gartner names Microsoft a Leader in the 2019 Cloud Access Security Broker (CASB) Magic Quadrant

In Gartner’s third annual Magic Quadrant for Cloud Access Security Brokers CASB, Microsoft was named a Leader based on its completeness of vision and ability to execute in the CASB market. Microsoft was also identified as strongest in execution. Gartner led the industry when they defined the term...

Top 5 use cases to help you make the most of your Cloud Access Security Broker

The number of apps and the flexibility for users to access them from anywhere continues to increase. This presents a challenge for IT departments in ensuring secure access and protecting the flow of critical data with a consistent set of controls. Cloud Access Security Brokers CASBs are a new...