7.7
/ 10
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Description
In One Identity OneLogin before 2025.3.0, a request returns the OIDC client secret with GET Apps API v2 (even though this secret should only be returned when an App is first created),
Basic Information
ID
CVE-2025-59363
Source
mitre
Published
Sep 14, 2025 at 00:00
Modified
Sep 14, 2025 at 04:51
Affected Product
Vendor
One Identity
Product
OneLogin
Affected Versions
One Identity OneLogin 0