OneLogin AD Connector Flaw Exposes Credentials & Allows Account Impersonation

June 16, 2025

OneLogin AD Connector Flaw Exposes Credentials & Allows Account Impersonation

Image: SpecterOps
A recent investigation by SpecterOps has uncovered a chain of critical vulnerabilities in OneLogin’s Active Directory (AD) Connector service that enabled attackers to impersonate use …

Published Date:
Jun 17, 2025 (2 hours, 9 minutes ago)

Vulnerabilities has been mentioned in this article.

CVE-2023-27584

CVE-2023-48238

CVE-2023-37266

Source: Read More

Previous ArticleZero-Click to Root: CISA Flags Active Exploits in Apple iOS and TP-Link Routers

Next Article PoCGen: AI Tool Automates Exploit Generation for npm Vulnerabilities with LLMs

IBM launches new integration to help unify AI security and governance

Meet Accessible UX Research, A Brand-New Smashing Book

Modernizing your approach to governance, risk and compliance

ScyllaDB X Cloud’s autoscaling capabilities meet the needs of unpredictable workloads in real time

RAIDOU Remastered: The Mystery of the Soulless Army Review (PC) – A well-done action-RPG remaster that makes me hopeful for more revivals of classic Atlus titles

With Windows 10 circling the drain, Windows 11 sees a long-overdue surge

This PC app boosts FPS in any game on any GPU for only $7 — and it just got a major update

Sam Altman claims Meta is trying to poach OpenAI staffers with $100 million bonuses, but “none of our best people have decided to take them up on that”

Why Inclusive Design Solutions Are important for Accessibility

Why Inclusive Design Solutions Are important for Accessibility

Microsoft Copilot for Power Platform

Integrate Coveo Atomic CLI-Based Hosted Search Page into Adobe Experience Manager (AEM)

RAIDOU Remastered: The Mystery of the Soulless Army Review (PC) – A well-done action-RPG remaster that makes me hopeful for more revivals of classic Atlus titles

RAIDOU Remastered: The Mystery of the Soulless Army Review (PC) – A well-done action-RPG remaster that makes me hopeful for more revivals of classic Atlus titles

With Windows 10 circling the drain, Windows 11 sees a long-overdue surge

This PC app boosts FPS in any game on any GPU for only $7 — and it just got a major update

OneLogin AD Connector Flaw Exposes Credentials & Allows Account Impersonation

OneLogin AD Connector Flaw Exposes Credentials & Allows Account Impersonation

CISA Flags CVE-2023-0386 as Actively Exploited Linux Kernel Privilege Escalation Threat

Critical Auth Bypass Vulnerability (CVE-2025-51381) Found in KAON KCM3100 Gateways

CVE-2025-5786 – TOTOLINK X15 HTTP POST Request Handler Buffer Overflow

CVE-2025-4419 – WordPress Hot Random Image Path Traversal Vulnerability

Microsoft confirms Offline Calendar for New Outlook on Windows 11

CVE-2025-30418 – NI Circuit Design Suite SymbolEditor Out-of-Bounds Write Vulnerability

This dev launched his game on Xbox Game Pass, but warns that others shouldn’t — here’s why

Microsoft’s hotpatching for Windows Server 2025 to be subscription-based starting July

CVE-2025-43920 – cPanel WHM Shell Command Injection Vulnerability

CVE-2025-5166 – Open Asset Import Library (Assimp) Out-of-Bounds Read Vulnerability

OneLogin AD Connector Flaw Exposes Credentials & Allows Account Impersonation

OneLogin AD Connector Flaw Exposes Credentials & Allows Account Impersonation

Related Posts