Skip to content
CVE PROGRAM SOURCE RECORD10.0 Critical

CVE-2024-10905

IdentityIQ Improper Access Control VulnerabilityIdentityIQ Improper Access Control Vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
SailPoint

Description

IdentityIQ 8.4 and all 8.4 patch levels prior to 8.4p2, IdentityIQ 8.3 and all 8.3 patch levels prior to 8.3p5, IdentityIQ 8.2 and all 8.2 patch levels prior to 8.2p8, and all prior versions allow HTTP/HTTPS access to static content in the IdentityIQ application directory that should be protected.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SailPoint Technologies IdentityIQ

Default version status: affected

  • 8.2 to < 8.2p8affected
  • 8.3 to < 8.3p5affected
  • 8.4 to < 8.4p2affected

References