Cloud Access Manager@* Security Vulnerabilities and Issues — Cloud Access Manager@* CVE List

Lucene search

OneidentityCloud Access Manager*

2 matches found

CVE•added 2019/11/04 5:15 p.m.•34 views

CVE-2019-13496

One Identity Cloud Access Manager before 8.1.4 Hotfix 1 allows OTP bypass via vectors involving a man in the middle, the One Identity Defender product, and replacing a failed SAML response with a successful SAML response.

8.1CVSS7.8AI score0.00633EPSS

CVE•added 2019/11/04 6:15 p.m.•28 views

CVE-2019-13497

One Identity Cloud Access Manager before 8.1.4 Hotfix 1 allows CSRF for logout requests.

6.5CVSS6.5AI score0.01236EPSS