CVE-2025-34062 | One Identity OneLogin Active Directory Connector up to 6.1.4 JWT Signing Key configuration endpoint information disclosure

A vulnerability classified as problematic was found in One Identity OneLogin Active Directory Connector up to 6.1.4. This vulnerability affects unknown code of the file /api/adc/v4/configuration endpoint of the component JWT Signing Key Handler. The manipulation leads to information disclosure.

This vulnerability was named CVE-2025-34062. Local access is required to approach this attack. There is no exploit available.

It is recommended to upgrade the affected component.