After comprehensive testing an authentication bypass vulnerability in the RDP component of One Identity Safeguard for Privileged Sessions has been determined to have potential impact on Safeguard for Privileged Sessions on Demand as well. This could allow man-in-the-middle attackers to obtain unencrypted information to access privileged sessions on target resources. Severity This vulnerability is identified by CVE-2024-40595. How does this affect me? One Identity is conducting emergency patching and maintenance to close this potential security issue. Additional details may be provided via KB 4377635. For current status, please see the One Identity Starling Status page. We apologize for the inconvenience this issue may have caused. |
---|
© 2024 One Identity LLC. ALL RIGHTS RESERVED. 利用規約 プライバシー Cookie Preference Center