← CVE Intelligence

CVE-2022-46835

SailPoint IdentityIQ JavaServer File Path Traversal Vulnerability PUBLISHED

Description (CNA)

IdentityIQ 8.3 and all 8.3 patch levels prior to 8.3p2, IdentityIQ 8.2 and all 8.2 patch levels prior to 8.2p5, IdentityIQ 8.1 and all 8.1 patch levels prior to 8.1p7, IdentityIQ 8.0 and all 8.0 patch levels prior to 8.0p6 allow access to arbitrary files in the application server filesystem due to a path traversal vulnerability in JavaServer Faces (JSF) 2.2.20 documented in CVE-2020-6950.

Affected (CNA)

Vendor / productVersions
SailPoint / IdentityIQaffected 8.3 through 8.3p1; affected 8.2 through 8.2p4; affected 8.1 through 8.1p6; affected 8.0 through 8.0p5

CWE

CWE-22

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.