{"id":"CVE-2024-45488","aliases":["EUVD-2024-41507","GHSA-c2jm-97rm-g3c3"],"status":"published","title":"One Identity Safeguard for Privileged Passwords before 7.5.2 allows unauthorized access because...","description":"One Identity Safeguard for Privileged Passwords before 7.5.2 allows unauthorized access because of an issue related to cookies. This only affects virtual appliance installations (VMware or HyperV). The fixed versions are 7.0.5.1 LTS, 7.4.2, and 7.5.2.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-10","score":0.50603,"percentile":0.98927,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2024-08-30T00:00:00Z","modified":"2026-06-17T07:54:18Z","exploits":[{"source":"nuclei","id":"CVE-2024-45488","title":"SafeGuard for Privileged Passwords \u003c 7.5.2 - Authentication Bypass","type":"detection template","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-45488.yaml"}],"products":[{"vendor":"safeguard","product":"privileged_passwords"}],"references":[{"url":"https://support.oneidentity.com/product-notification/noti-00001628"},{"url":"https://support.oneidentity.com/kb/4376740/safeguard-for-privileged-passwords-security-vulnerability-notification-defect-460620"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-45488"},{"url":"https://github.com/advisories/GHSA-c2jm-97rm-g3c3"}],"sources":{"cve":[{"id":"CVE-2024-45488","description":"One Identity Safeguard for Privileged Passwords before 7.5.2 allows unauthorized access because of an issue related to cookies. This only affects virtual appliance installations (VMware or HyperV). The fixed versions are 7.0.5.1 LTS, 7.4.2, and 7.5.2.","status":"published","published":"2024-08-30T00:00:00Z","modified":"2025-03-13T18:23:42.38Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"adp"}],"updated_at":"2026-11-02T14:34:08.500935Z"}],"euvd":[{"id":"EUVD-2024-41507","description":"One Identity Safeguard for Privileged Passwords before 7.5.2 allows unauthorized access because of an issue related to cookies. This only affects virtual appliance installations (VMware or HyperV). The fixed versions are 7.0.5.1 LTS, 7.4.2, and 7.5.2.","status":"published","published":"2024-08-30T00:00:00Z","modified":"2025-03-13T18:23:42Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T20:53:04.232984Z"}],"ghsa":[{"id":"GHSA-c2jm-97rm-g3c3","title":"One Identity Safeguard for Privileged Passwords before 7.5.2 allows unauthorized access because...","description":"One Identity Safeguard for Privileged Passwords before 7.5.2 allows unauthorized access because of an issue related to cookies. This only affects virtual appliance installations (VMware or HyperV). The fixed versions are 7.0.5.1 LTS, 7.4.2, and 7.5.2.","status":"published","published":"2024-08-30T03:30:44Z","modified":"2024-08-30T21:32:42Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T14:58:09.209202Z"}],"nvd":[{"id":"CVE-2024-45488","description":"One Identity Safeguard for Privileged Passwords before 7.5.2 allows unauthorized access because of an issue related to cookies. This only affects virtual appliance installations (VMware or HyperV). The fixed versions are 7.0.5.1 LTS, 7.4.2, and 7.5.2.","status":"published","published":"2024-08-30T02:15:03.757Z","modified":"2026-06-17T07:54:18.22Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"updated_at":"2026-11-02T14:10:21.771404Z"}]}}