Description
In One Identity OneLogin Active Directory Connector before 6.1.5, encryption of the DirectoryToken was mishandled, aka ST-812.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| OneLogin | Active Directory Connector | < 6.1.5 | 6.1.5 |
Medium · 5.0
CVE-2025-52925
EUVD-2025-19689GHSA-pw4q-8mrr-p3ww
In One Identity OneLogin Active Directory Connector before 6.1.5, encryption of the DirectoryToken was mishandled, aka ST-812.
Published Jul 2, 2025 · Updated Jul 2, 2025 · Assigned by mitre