One Identity recommends installing Operating System Level 3 Patch for SPP versions 7.0 or above.
This patch includes the changes listed in the following sections. One Identity may generate additional patches for future releases of the product.
Minimum patch version: 7.0.0.18433. If you are running an earlier version of the Safeguard for Privileged Passwords Appliance, you must upgrade to this version before applying OS Level 3 patch.
Please download the OS Level 3 patch applicable for your SPP Physical or Virtual appliance:
For Physical SPP download from here
For Virtual SPP download from here
Resolved issues
The following is a list of issues resolved in this OS patch.
Issues resolved in OS patch:
Resolved Issue | Issue ID |
Previously, a vulnerability to CVE-2023-44487 was identified in SPP. The vulnerability is addressed in .NET 6.0.23, which is part of the OS Level 3 patch. | 437875 |
Applicability of this OS patch
Products affected by this OS patch:
Product Name | Version |
Safeguard for Privileged Passwords | 7.0 or above |
1. Log in to the primary appliance, as an Appliance Administrator.
2. Go to the patch updates page:
3. Click Upload a File and browse to select an update file.
The patch will be uploaded and distributed to all of the appliances in the cluster.
NOTE: If you make changes to the cluster, such as adding a new replica, while a patch is staged, the update file must be distributed to the new cluster member before the patch install process can begin. Safeguard for Privileged Passwords will not allow the patch install process to begin until all of the cluster members report that they have the update file stored locally.
NOTE: Clicking the Cancel button during the distribution process stops the distribution of the update file to the replicas. At this point, you can click one of the following buttons:
4. Once the file has been successfully distributed to all of the replicas in the cluster, click the Install Now button.
The primary appliance will go into Maintenance mode to begin the update operation. Once the primary appliance is successfully updated, Safeguard for Privileged Passwords will perform the update operation on each replica, one at a time. During an update operation, the cluster will be locked so that no other cluster operations can interfere with the update operation. Once the update operation is completed on all cluster members, the cluster will automatically unlock so normal operations can resume.
The Cluster view shows that an update operation is in progress and the cluster members that are locked, awaiting to install the update file. Go to:
In addition, go to Patch Updates:
There will be a minimal period of downtime for some appliance functionality as the patch stops and starts a few internal services. During this process you will notice a Service is Unavailable banner that appears while waiting for the services to restart.
Removing this OS patch
Once installed you cannot remove this patch.
© 2025 One Identity LLC. ALL RIGHTS RESERVED. Terms of Use Privacy Cookie Preference Center