Description (CNA)
In One Identity Identity Manager 9.x before 9.3, an insecure direct object reference (IDOR) vulnerability allows privilege escalation. Only On-Premise installations are affected.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| OneIdentity / Identity Manager | affected 9.0.0 before 9.3 |
CWE
CWE-302
References
- https://www.oneidentity.com/community/identity-manager/
- https://support.oneidentity.com/technical-documents/identity-manager/9.3/release-notes/
- https://support.oneidentity.com/product-notification/noti-00001678
ADP enrichment
No English description supplied.
No references supplied.