Skip to main content

Vendors Questionnaires Investors News

0-Doubt — neutral IT/Security research

Browse Products Market reports Resellers Certified analysts Investors RFI/RFP questionnaires How trust works Nothing here is ranked by payment Help & FAQ API Privacy Terms Cookies

Soffid Privileged Access Management (PAM) | 0-Doubt

Home
Vendors
Soffid
Soffid Privileged Access Management (PAM)

Home
Vendors
Identity & Access Management
Soffid Privileged Access Management (PAM)

Soffid Privileged Access Management (PAM)

AI-generated from public sourcesThe starting point for every profile: auto-generated by 0-Doubt from public vendor materials, and not yet confirmed by the vendor or an independent analyst. Nothing here is hidden or overstated — it simply has not been reviewed yet.Where every profile starts, before the vendor or an analyst has reviewed it. A higher label means a more independent source — not a better product.How trust works →Secure coding rating: 8/100How this score is computedA product with no known CVEs starts at a neutral score and climbs the longer it goes without one; a product with known CVEs is penalized by severity instead. This one has 3 known CVEs (vendor-level match — see the CVE list below) and is tracked as ~107 days old in our catalog (a stand-in for real release date, which we don't track). The platform admin controls the formula's weights.

PAM solution for controlling, auditing, and protecting privileged accounts

by Soffid · soffid.com · source ↗

Known CVEs (3)

CVE-2025-32408 ↗LOW 2.52025
In Soffid Console 3.6.31 before 3.6.32, authorization to use the pam service is mishandled.
CVE-2024-39669 ↗CRITICAL 9.82024
In the Console in Soffid IAM before 3.5.39, necessary checks were not applied to some Java objects. A malicious agent could possibly execute arbitrary code in the Sync Server and compromise security.
CVE-2017-9363 ↗CRITICAL 9.8

Materials

0

No datasheets, whitepapers, case studies, videos, or demos linked yet.

Other Identity & Access Management products

SlashID Identity Risk & Posture Management (ISPM) · SlashID
SlashID Identity Threat Detection (ITDR) · SlashID
Soffid Access Management · Soffid
Soffid IGA · Soffid
SplitSecure · SplitSecure
Sterling Identity · Sterling Identity
Strata Identity Orchestration · Strata Identity
Strata Maverics Identity Orchestration · Strata Identity

2017

Untrusted Java serialization in Soffid IAM console before 1.7.5 allows remote attackers to achieve arbitrary remote code execution via a crafted authentication request.