TI-2019-10133 CVE-2019-13497 · GHSA-5329-qvwg-9jjh
One Identity Cloud Access Manager before 8.1.4 Hotfix 1 allows CSRF for logout requests.
Priority LOW 30
One Identity Cloud Access Manager before 8.1.4 Hotfix 1 allows CSRF for logout requests.
Vulnerabilities
3 records
TI-2019-10132 CVE-2019-13496 · GHSA-q8jc-hpcv-jmxw
One Identity Cloud Access Manager before 8.1.4 Hotfix 1 allows OTP bypass via vectors…
Priority LOW 37
One Identity Cloud Access Manager before 8.1.4 Hotfix 1 allows OTP bypass via vectors involving a man in the middle, the One Identity Defender product, and replacing a failed SAML response with a successful SAML response…
TI-2019-10134 CVE-2019-13498 · GHSA-pp38-7c4c-8x3w
One Identity Cloud Access Manager 8.1.3 does not use HTTP Strict Transport Security…
Priority LOW 35
One Identity Cloud Access Manager 8.1.3 does not use HTTP Strict Transport Security (HSTS), which may allow man-in-the-middle (MITM) attacks.