Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Advisory: One Identity OneLogin Active Directory Connector (ADC) — support.onelogin.com/product-notification/noti-00001768 Clear all filters
TI-2025-24231 CVE-2025-34063 · GHSA-g2mv-fq56-3w42

OneLogin AD Connector JWT Authentication Bypass via Exposed Signing Key

Priority HIGH 82

A cryptographic authentication bypass vulnerability exists in OneLogin AD Connector prior to 6.1.5 due to the exposure of a tenant’s SSO JWT signing key via the /api/adc/v4/configuration endpoint.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00612 Published 2025-07-01 Fixed in 6.1.5 CWE-290
TI-2025-24230 CVE-2025-34062 · GHSA-mq9j-59r5-qmvh

OneLogin AD Connector API Credential and Signing Key Exposure

Priority LOW 31

An information disclosure vulnerability exists in OneLogin AD Connector versions prior to 6.1.5 via the /api/adc/v4/configuration endpoint.

CVSS 4.0MEDIUM 5.7 Local Low privileges No interaction EPSS 0.00163 Published 2025-07-01 Fixed in 6.1.5 CWE-200