CVE-2024-2228highCWE-269

CVE-2024-2228: falha de alta gravidade em SailPoint IdentityIQ

IdentityIQ Authorization of QuickLink Target Identities Vulnerability

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar IdentityIQ

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.1epss 0.4%
This vulnerability allows an authenticated user to perform a Lifecycle Manager flow or other QuickLink for a target user outside of the defined QuickLink Population.
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
Produtos afetados
SailPoint · IdentityIQ
CVEs relacionadas — SailPoint IdentityIQ

No mesmo produto, das mais perigosas para as menos.

CVE-2022-46835HIGHSailPoint IdentityIQ JavaServer File Path Traversal VulnerabilityEPSS 0.9%CVE-2024-2227CRITICALIdentityIQ JavaServer Faces File Path Traversal VulnerabilityEPSS 0.8%CVE-2023-32217CRITICALSailPoint IdentityIQ Unsafe use of Reflection VulnerabilityEPSS 0.6%CVE-2022-45435MEDIUMSailPoint IdentityIQ Access Control BypassEPSS 0.4%CVE-2024-1714HIGHAccess Request for Entitlement Values with Leading/Trailing WhitespaceEPSS 0.3%