← CVE Intelligence

CVE-2024-10905

IdentityIQ Improper Access Control VulnerabilityIdentityIQ Improper Access Control Vulnerability PUBLISHED

Description (CNA)

IdentityIQ 8.4 and all 8.4 patch levels prior to 8.4p2, IdentityIQ 8.3 and all 8.3 patch levels prior to 8.3p5, IdentityIQ 8.2 and all 8.2 patch levels prior to 8.2p8, and all prior versions allow HTTP/HTTPS access to static content in the IdentityIQ application directory that should be protected.

Affected (CNA)

Vendor / productVersions
SailPoint Technologies / IdentityIQaffected 8.2 before 8.2p8; affected 8.3 before 8.3p5; affected 8.4 before 8.4p2

CWE

CWE-66

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.