VYPR
← All advisories
High severity7.4NVD Advisory· Published Jul 29, 2019· Updated Jun 17, 2026

CVE-2019-13498

CVE-2019-13498

Description

One Identity Cloud Access Manager 8.1.3 does not use HTTP Strict Transport Security (HSTS), which may allow man-in-the-middle (MITM) attacks. This issue is fixed in version 8.1.4.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Oneidentity/Cloud Access Manager2 versions
    cpe:2.3:a:oneidentity:cloud_access_manager:8.1.3:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:oneidentity:cloud_access_manager:8.1.3:*:*:*:*:*:*:*
    • (no CPE)range: <8.1.4
  • One Identity/Cloud Access Managerdescription

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.