Diamond Member ThaHaka 0 Posted October 1, 2025 Diamond Member Share Posted October 1, 2025 This is the hidden content, please Sign In or Sign Up A high-severity security flaw has been disclosed in the One Identity OneLogin Identity and Access Management (IAM) solution that, if successfully exploited, could expose sensitive OpenID Connect (OIDC) application client secrets under certain circumstances. The vulnerability, tracked as CVE-2025-59363, has been assigned a CVSS score of 7.7 out of 10.0. It has been described as a case of This is the hidden content, please Sign In or Sign Up 0 Quote Link to comment https://hopzone.eu/forums/topic/282749-h4ckn3wsonelogin-bug-let-attackers-use-api-keys-to-steal-oidc-secrets-and-impersonate-apps/ Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.