31 matches found
CVE-2026-82356
Imprivata EAM =26.2.6 lacks the ability to rotate its RSA key pair after deployment when generating an X.509 certificate. Using an RSA key pair indefinitely for certificate generation is against best practices...
CVE-2026-82356 Imprivata EAM: Unrotatable X.509 RSA Key Pair in Production
Imprivata EAM =26.2.6 lacks the ability to rotate its RSA key pair after deployment when generating an X.509 certificate. Using an RSA key pair indefinitely for certificate generation is against best practices...
EUVD-2026-85537
Imprivata EAM =26.2.6 lacks the ability to rotate its RSA key pair after deployment when generating an X.509 certificate. Using an RSA key pair indefinitely for certificate generation is against best practices...
CVE-2026-82356
Imprivata Enterprise Access Management (EAM) versions 26.2.6 and below lack a supported mechanism to rotate the RSA key pair used to generate the appliance's X.509 certificate . Because the key pair remains static indefinitely, a compromise of the private key—via backup exfiltration, hypervisor s...
CVE-2026-82356 Imprivata EAM: Unrotatable X.509 RSA Key Pair in Production
Imprivata EAM =26.2.6 lacks the ability to rotate its RSA key pair after deployment when generating an X.509 certificate. Using an RSA key pair indefinitely for certificate generation is against best practices...
PT-2026-97505
Name of the Vulnerable Software and Affected Versions Imprivata EAM versions prior to 26.2.7 Description The software lacks a mechanism to rotate the RSA key pair used for generating X.509 certificates after deployment. This means the key pair remains permanent once the system is deployed, which...
CVE-2026-82356: Inadequate Encryption Strength
Imprivata EAM =26.2.6 lacks the ability to rotate its RSA key pair after deployment when generating an X.509 certificate. Using an RSA key pair indefinitely for certificate generation is against best practices...
Enterprise Access Management EAM does not rotate RSA keys
Overview Imprivata Enterprise Access Management EAM, an authentication and single sign-on platform for enterprise and clinical environments, contains a vulnerability in versions 26.2.6 and below. The product provides no supported mechanism to rotate its RSA key pair after deployment, meaning the...
EUVD-2021-31885
Malicious code in bioql PyPI...
EUVD-2024-54815
Malicious code in bioql PyPI...
CVE-2024-12310
A vulnerability in Imprivata Enterprise Access Management formerly Imprivata OneSign allows bypassing the login screen of the shared kiosk workstation and allows unauthorized access to the underlying Windows system through the already logged-in autologon account due to insufficient handling of...
CVE-2024-12310
A vulnerability in Imprivata Enterprise Access Management formerly Imprivata OneSign allows bypassing the login screen of the shared kiosk workstation and allows unauthorized access to the underlying Windows system through the already logged-in autologon account due to insufficient handling of...
CVE-2024-12310 Bypass of Login Screen on Shared Kiosk Workstations
A vulnerability in Imprivata Enterprise Access Management formerly Imprivata OneSign allows bypassing the login screen of the shared kiosk workstation and allows unauthorized access to the underlying Windows system through the already logged-in autologon account due to insufficient handling of...
CVE-2024-12310 Bypass of Login Screen on Shared Kiosk Workstations
A vulnerability in Imprivata Enterprise Access Management formerly Imprivata OneSign allows bypassing the login screen of the shared kiosk workstation and allows unauthorized access to the underlying Windows system through the already logged-in autologon account due to insufficient handling of...
CVE-2024-12310
CVE-2024-12310 concerns Imprivata Enterprise Access Management (formerly Imprivata OneSign). Connected documents confirm a vulnerability where insufficient handling of keyboard shortcuts allows bypassing the shared kiosk login screen and gaining unauthorized access to the underlying Windows syste...
Imprivata Enterprise Access Management 授权问题漏洞
Imprivata Enterprise Access Management is an identity and access management system from Imprivata Corporation, USA. An authorization issue vulnerability exists in Imprivata Enterprise Access Management versions 5.3 through 24.2, which stems from insufficient handling of keyboard shortcuts and cou...
PT-2025-30572 · Microsoft +1 · Windows +2
Name of the Vulnerable Software and Affected Versions: Imprivata Enterprise Access Management versions 5.3 through 24.2 Description: A flaw in Imprivata Enterprise Access Management formerly Imprivata OneSign allows bypassing the login screen on shared kiosk workstations, potentially granting...
CVE-2024-12310: Improper Authentication
A vulnerability in Imprivata Enterprise Access Management formerly Imprivata OneSign allows bypassing the login screen of the shared kiosk workstation and allows unauthorized access to the underlying Windows system through the already logged-in autologon account due to insufficient handling of...
