CVE-2024-45488

CVSS 3.1: 9.8 critical
EPSS: 51%p99
Published: Aug 30, 2024 · Aug 30, 2024
Modified: Jun 17, 2026

Analyze CVE-2024-45488 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

One Identity Safeguard for Privileged Passwords before 7.5.2 allows unauthorized access because of an issue related to cookies. This only affects virtual appliance installations (VMware or HyperV). The fixed versions are 7.0.5.1 LTS, 7.4.2, and 7.5.2.

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (50.6%)

In the news

2 stories

Week in review: Critical VMware vCenter Server bugs fixed, Apple releases iOS 18

Help Net SecuritySep 22, 00:00 UTC · Sep 22, 2024Data breachExploitedCVE-2024-38812 CVE-2024-38813 CVE-2024-45488+36 · 2 reads

Patch this critical Safeguard for Privileged Passwords auth bypass flaw (CVE-2024-45488)

Help Net SecuritySep 19, 00:00 UTC · Sep 19, 2024VulnerabilityCVE-2024-454881