CVE-2025-56689

Quest One Identity (specifically Safeguard for Privileged Passwords Appliance version 7.5.1.20903 ) is vulnerable to a One-Time Password (OTP) and Multifactor Authentication (MFA) bypass via response manipulation . An attacker who intercepts or captures a valid OTP response can replay it to bypas...