One Identity OneLogin Active Directory Connector DirectoryToken Encryption Vulnerability

A vulnerability exists in One Identity OneLogin Active Directory Connector versions prior to 6.1.5, where the encryption of the DirectoryToken was improperly managed. This flaw has been addressed in the 6.1.5 release, which includes miscellaneous security enhancements such as proper encryption of the DirectoryToken.

Impact

The vulnerability could lead to improper encryption of sensitive data, potentially allowing for unauthorized access or manipulation of directory information.

Remediation

Users can upgrade to One Identity OneLogin Active Directory Connector version 6.1.5, which is available for download from the OneLogin Downloads page.