Skip to content
OpenAdvisories

Vendor

One Identity

7 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 4.0

    In One Identity OneLogin before 2025.2.0, the SQL connection "application name" is set based on the value of an untrust…

  • Medium 5.7

    OneLogin AD Connector API Credential and Signing Key Exposure

    An information disclosure vulnerability exists in OneLogin AD Connector versions prior to 6.1.5 via the /api/adc/v4/configuration endpoint. An attacker with access to a valid directory_token—which may be retrievable from host registry keys or improperly secur…