CyberRota Analysis
AI-GeneratedA critical authentication bypass vulnerability exists in miniOrange Security Software's OAuth Single Sign On (SSO) solution, allowing attackers to exploit password recovery mechanisms. This flaw can lead to unauthorized access to user accounts, posing significant risks to organizations relying on this software for secure authentication. Organizations using affected versions should prioritize immediate remediation to mitigate potential breaches.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Authentication Bypass Using an Alternate Path or Channel vulnerability in miniOrange Security Software Pvt Ltd. OAuth Single Sign On - SSO (OAuth Client) allows Password Recovery Exploitation. This issue affects OAuth Single Sign On - SSO (OAuth Client): from n/a through 38.5.8.