CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-13496

One Identity Cloud Access Manager before 8.1.4 Hotfix 1 allows OTP bypass via vectors involving a man in the middle, the One Identity Defender product, and replacing a failed SAML response with a successful SAML response.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.006

EPSS Ranking 69.3%

CVSS Severity

CVSS v3 Score 8.1

CVSS v2 Score 4.3

References

Products affected by CVE-2019-13496

Oneidentity » Cloud Access Manager » Version: N/A

cpe:2.3:a:oneidentity:cloud_access_manager:-
Oneidentity » Cloud Access Manager » Version: 7.0

cpe:2.3:a:oneidentity:cloud_access_manager:7.0
Oneidentity » Cloud Access Manager » Version: 7.0.1

cpe:2.3:a:oneidentity:cloud_access_manager:7.0.1
Oneidentity » Cloud Access Manager » Version: 7.0.2

cpe:2.3:a:oneidentity:cloud_access_manager:7.0.2
Oneidentity » Cloud Access Manager » Version: 7.1

cpe:2.3:a:oneidentity:cloud_access_manager:7.1
Oneidentity » Cloud Access Manager » Version: 8.0

cpe:2.3:a:oneidentity:cloud_access_manager:8.0
Oneidentity » Cloud Access Manager » Version: 8.0.1

cpe:2.3:a:oneidentity:cloud_access_manager:8.0.1
Oneidentity » Cloud Access Manager » Version: 8.1

cpe:2.3:a:oneidentity:cloud_access_manager:8.1
Oneidentity » Cloud Access Manager » Version: 8.1.1

cpe:2.3:a:oneidentity:cloud_access_manager:8.1.1
Oneidentity » Cloud Access Manager » Version: 8.1.2

cpe:2.3:a:oneidentity:cloud_access_manager:8.1.2
Oneidentity » Cloud Access Manager » Version: 8.1.3

cpe:2.3:a:oneidentity:cloud_access_manager:8.1.3
Oneidentity » Cloud Access Manager » Version: 8.1.4

cpe:2.3:a:oneidentity:cloud_access_manager:8.1.4

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-13496

Products

Pricing

Contact Us