CVE-2025-52925 | One Identity OneLogin Active Directory Connector up to 6.1.4 DirectoryToken transmission of private resources into a new sphere (‘resource leak’)

A vulnerability was found in One Identity OneLogin Active Directory Connector up to 6.1.4. It has been rated as problematic. Affected by this issue is some unknown functionality of the component DirectoryToken Handler. The manipulation leads to transmission of private resources into a new sphere (‘resource leak’).

This vulnerability is handled as CVE-2025-52925. The attack may be launched remotely. There is no exploit available.

It is recommended to upgrade the affected component.