One Identity by Quest Safeguard for Privileged Passwords Appliance 7.5.1.20903 is vulnerable to One Time Password (OTP)/Multifactor Authentication (MFA) bypass using response manipulation. An attacker who intercepts or captures a valid OTP response can bypass the OTP verification step by replaying the same response.
References
| Link | Resource |
|---|---|
| https://medium.com/@vigneshrajan54_88115/how-i-found-cve-2025-56689-in-safeguard-for-privileged-passwords-6d58fd4bf453 | Exploit Third Party Advisory |
Configurations
History
09 Sep 2025, 19:14
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Quest
Quest one Identity |
|
| References | () https://medium.com/@vigneshrajan54_88115/how-i-found-cve-2025-56689-in-safeguard-for-privileged-passwords-6d58fd4bf453 - Exploit, Third Party Advisory | |
| CPE | cpe:2.3:a:quest:one_identity:7.5.1.20903:*:*:*:*:*:*:* |
08 Sep 2025, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | (en) One Identity by Quest Safeguard for Privileged Passwords Appliance 7.5.1.20903 is vulnerable to One Time Password (OTP)/Multifactor Authentication (MFA) bypass using response manipulation. An attacker who intercepts or captures a valid OTP response can bypass the OTP verification step by replaying the same response. |
03 Sep 2025, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 4.6 |
| CWE | CWE-290 |
03 Sep 2025, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-09-03 17:15
Updated : 2025-09-09 19:14
NVD link : CVE-2025-56689
Mitre link : CVE-2025-56689
CVE.ORG link : CVE-2025-56689
JSON object : View
Products Affected
quest
- one_identity
CWE
CWE-290
Authentication Bypass by Spoofing