high7.7
CVE-2025-59363
In One Identity OneLogin before 2025.3.0, a request returns the OIDC client secret with GET Apps API v2 (even though this secret should only be returned when a…
Impact
In One Identity OneLogin before 2025.3.0, a request returns the OIDC client secret with GET Apps API v2 (even though this secret should only be returned when an App is first created),
Affected products
| Product | Affected versions |
|---|---|
| One Identity OneLogin | before 2025.3.0 |
Versions were read from the advisory text. No structured product data has been published for this record yet.