CVE-2024-45488

One Identity Safeguard for Privileged Passwords before 7.5.2 allows unauthorized access because of an issue related to cookies. This only affects virtual appliance installations (VMware or HyperV). The fixed versions are 7.0.5.1 LTS, 7.4.2, and 7.5.2.

Score

CVSS 3.1 9.8 Critical

Status

Deferred - cve@mitre.org

Published

2024-08-30

Last modified

2025-03-13

Affected products

• Privileged Passwords (Safeguard)

References

• https://support.oneidentity.com/kb/4376740/safeguard-for-privileged-passwords-security-vulnerability-notification-defec…
• https://support.oneidentity.com/product-notification/noti-00001628