← Database

CVE-2024-40595

MEDIUM CVSS: 5.3 Published: 2024-10-24 Modified: 2026-06-17

Description

An authentication-bypass issue in the RDP component of One Identity Safeguard for Privileged Sessions (SPS) On Premise before 7.5.1 (and LTS before 7.0.5.1) allows man-in-the-middle attackers to obtain access to privileged sessions on target resources by intercepting cleartext RDP protocol information.

Affected Platforms

Unknown

Weakness Type

CWE-319

References