CVE-2024-45488

critical

Description

One Identity Safeguard for Privileged Passwords before 7.5.2 allows unauthorized access because of an issue related to cookies. This only affects virtual appliance installations (VMware or HyperV). The fixed versions are 7.0.5.1 LTS, 7.4.2, and 7.5.2.

References

References
More

https://www.helpnetsecurity.com/2024/09/19/cve-2024-45488/

https://www.helpnetsecurity.com/2024/09/19/cve-2024-45488

https://support.oneidentity.com/product-notification/noti-00001628

https://support.oneidentity.com/kb/4376740/safeguard-for-privileged-passwords-security-vulnerability-notification-defect-460620

Details

Source: Mitre, NVD

Published: 2024-08-30

Updated: 2026-04-15

Named Vulnerability: Skeleton Cookie

Risk Information

CVSS v2

Base Score: 5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N

Severity: Medium

CVSS v3

Base Score: 9.8

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity: Critical

EPSS

EPSS: 0.50172