Paper/Archive/CVE-2024-45488

CVE-2024-45488

safeguard privileged_passwords — One Identity Safeguard for Privileged Passwords before 7.5.2 allows unauthorized access because of an issue related to cookies.

EPSS 51%CVSS 9.8

critical.is priorityof 100

CVSS 9.8 (ADP)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 98.9.989 × 2019.8 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

One Identity Safeguard for Privileged Passwords before 7.5.2 allows unauthorized access because of an issue related to cookies. This only affects virtual appliance installations (VMware or HyperV). The fixed versions are 7.0.5.1 LTS, 7.4.2, and 7.5.2.

Affected

ProductAffectedFixed inSource

n/an/a–CNA

privileged_passwords< 7.5.27.5.2CISA-ADP

privileged_passwords< 7.4.27.4.2CISA-ADP

privileged_passwords< 7.0.5.1LTS7.0.5.1LTSCISA-ADP

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refsupport.oneidentity.com/product-notification/noti-00001628 refsupport.oneidentity.com/kb/4376740/safeguard-for-privileged-passwords-security-vulnerability-notification-defect-460620