CyberSecBulletin

OneLogin vulnerabilities

We track 1 vulnerability in OneLogin products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 10, 2024.

1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score

Latest OneLogin vulnerabilities

  • 9.8 Critical severity

    ruby-saml: Improper Verification of Cryptographic Signature

    CVE-2024-45409SAML-ToolkitsEPSS 12.5%

    The Ruby SAML library is for implementing the client side of a SAML authorization. Ruby-SAML in <= 12.2 and 1.13.0 <= 1.16.0 does not properly verify the signature of the SAML Response. An unauthenticated attacker with access to any signed saml document (by th