Man-in-the-Middle Attack Allows Access to Privileged Sessions
CVE-2024-40595

Currently unrated

Key Information:

Vendor: One Identity
Vendor: CVE Published:; 24 October 2024

🔔 Create One Identity Vulnerability Alert

What is CVE-2024-40595?

An authentication-bypass issue in the RDP component of One Identity Safeguard for Privileged Sessions (SPS) On Premise before 7.5.1 (and LTS before 7.0.5.1) allows man-in-the-middle attackers to obtain access to privileged sessions on target resources by intercepting cleartext RDP protocol information.

References

https://support.oneidentity.com/kb/4376565/cve-2024-40595...

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Oct 24, 2024
Vulnerability Reserved
Jul 6, 2024