Context-aware adaptive MFA using AI-driven risk scoring for authentication
by OneLogin · onelogin.com · source ↗
In One Identity OneLogin before 2025.3.0, a request returns the OIDC client secret with GET Apps API v2 (even though this secret should only be returned when an App is first created),
In One Identity OneLogin before 2025.2.0, the SQL connection "application name" is set based on the value of an untrusted X-RequestId HTTP request header.
In One Identity OneLogin Active Directory Connector before 6.1.5, encryption of the DirectoryToken was mishandled, aka ST-812.
No datasheets, whitepapers, case studies, videos, or demos linked yet.