112 matches found
Cross site scripting
The Management Interface of the Teradici Cloud Access Connector and Cloud Access Connector Legacy for releases prior to April 24, 2020 v16 and earlier for the Cloud Access Connector contains a stored cross-site scripting XSS vulnerability which allows a remote unauthenticated attacker to poison l...
Remote file inclusion
The Management Interface of the Teradici Cloud Access Connector and Cloud Access Connector Legacy for releases prior to April 20, 2020 v15 and earlier for Cloud Access Connector contains a local file inclusion vulnerability which allows an unauthenticated remote attacker to leak LDAP credentials...
CVE-2020-13176
CVE-2020-13176 affects the Teradici Cloud Access Connector Management Interface (releases prior to 24 Apr 2020; v16 and earlier for Cloud Access Connector). The vulnerability is a stored cross-site scripting (XSS) flaw that lets a remote unauthenticated attacker poison log files with malicious Ja...
CVE-2020-13176
The Management Interface of the Teradici Cloud Access Connector and Cloud Access Connector Legacy for releases prior to April 24, 2020 v16 and earlier for the Cloud Access Connector contains a stored cross-site scripting XSS vulnerability which allows a remote unauthenticated attacker to poison l...
CVE-2020-13175
The Management Interface of the Teradici Cloud Access Connector and Cloud Access Connector Legacy for releases prior to April 20, 2020 v15 and earlier for Cloud Access Connector contains a local file inclusion vulnerability which allows an unauthenticated remote attacker to leak LDAP credentials...
CVE-2020-13175
CVE-2020-13175 affects the Teradici Cloud Access Connector Management Interface (legacy and v15) released before 20-Apr-2020. It is a local file inclusion vulnerability that allows an unauthenticated remote attacker to leak LDAP credentials via a specially crafted HTTP request. NVD CVSS data show...
Microsegmentation and Isolation: 2 Essential Strategies in Zero-Trust Security
The headlines over the past few years have been consistent – enterprises are pouring more and more money into cybersecurity countermeasures. Indications are that 2020 will be no different, with reports that nearly three quarters of CISOs plan to ask their CFOs for increased cybersecurity investme...
One Identity Cloud Access Manager Cross-Site Request Forgery Vulnerability
One Identity Cloud Access Manager CAM is a Web-based access management solution from US-based One Identity. The product supports single sign-on, multi-factor authentication, access control and auditing. A cross-site request forgery vulnerability exists in One Identity CAM versions prior to 8.1.4...
CVE-2019-13497
One Identity Cloud Access Manager before 8.1.4 Hotfix 1 allows CSRF for logout requests...
CVE-2019-13496
One Identity Cloud Access Manager before 8.1.4 Hotfix 1 allows OTP bypass via vectors involving a man in the middle, the One Identity Defender product, and replacing a failed SAML response with a successful SAML response...
CVE-2019-13496
One Identity Cloud Access Manager before 8.1.4 Hotfix 1 allows OTP bypass via vectors involving a man in the middle, the One Identity Defender product, and replacing a failed SAML response with a successful SAML response...
CVE-2019-13497
CVE-2019-13497 affects One Identity Cloud Access Manager (CAM) prior to 8.1.4 Hotfix 1. The issue is a CSRF on logout requests caused by the web application not adequately validating that requests originate from a trusted user. Consequence is that an attacker could trigger unintended logout actio...
CVE-2019-13497
One Identity Cloud Access Manager before 8.1.4 Hotfix 1 allows CSRF for logout requests...
CVE-2019-13496
CVE-2019-13496 affects One Identity Cloud Access Manager, specifically versions prior to 8.1.4 Hotfix 1. The issue enables an OTP bypass via a MITM/SSL-strip scenario involving the Defender component and manipulation of a failed SAML response, as demonstrated by public exploitation and discussion...
Exploit for Cross-Site Request Forgery (CSRF) in Oneidentity Cloud_Access_Manager
CVE-2019-13497 Exploit Title: Cross Site Request Forgery CSR...
Exploit for Improper Validation of Integrity Check Value in Oneidentity Cloud_Access_Manager
CVE-2019-13496 Exploit Title: OTP bypass Filed Integrity ch...
Gartner names Microsoft a Leader in the 2019 Cloud Access Security Broker (CASB) Magic Quadrant
In Gartner’s third annual Magic Quadrant for Cloud Access Security Brokers CASB, Microsoft was named a Leader based on its completeness of vision and ability to execute in the CASB market. Microsoft was also identified as strongest in execution. Gartner led the industry when they defined the term...
Top 5 use cases to help you make the most of your Cloud Access Security Broker
The number of apps and the flexibility for users to access them from anywhere continues to increase. This presents a challenge for IT departments in ensuring secure access and protecting the flow of critical data with a consistent set of controls. Cloud Access Security Brokers CASBs are a new...