One Identity Onelogin Active Directory Connector (Adc)
3 CVEs affecting One Identity Onelogin Active Directory Connector (Adc). Latest disclosed: 2025-07-01. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-34064 | | 2025-07-01 | A cloud infrastructure misconfiguration in OneLogin AD Connector results in log data being sent to a hardcoded S3 bucket (onelogin-adc-logs-production) without… | |
CVE-2025-34063 | | 2025-07-01 | A cryptographic authentication bypass vulnerability exists in OneLogin AD Connector prior to 6.1.5 due to the exposure of a tenant’s SSO JWT signing key via th… | |
CVE-2025-34062 | | 2025-07-01 | An information disclosure vulnerability exists in OneLogin AD Connector versions prior to 6.1.5 via the /api/adc/v4/configuration endpoint. An attacker with ac… |