← CVE Intelligence

CVE-2024-3319

Security implication in SailPoint Identity Security Cloud IdentityProfile API Endpoints PUBLISHED

Description (CNA)

An issue was identified in the Identity Security Cloud (ISC) Transform preview and IdentityProfile preview API endpoints that allowed an authenticated administrator to execute user-defined templates as part of attribute transforms which could allow remote code execution on the host.

Affected (CNA)

Vendor / productVersions
SailPoint / Identity Security Cloudaffected n/a

CWE

CWE-94

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.