CVE-2024-1714

Опубликовано: 21 фев. 2024

Источник: nvd

CVSS3: 7.1

EPSS Низкий

Описание

An issue exists in all supported versions of IdentityIQ Lifecycle Manager that can result if an entitlement with a value containing leading or trailing whitespace is requested by an authenticated user in an access request.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:sailpoint:identityiq:8.1:-:*:*:*:*:*:*

cpe:2.3:a:sailpoint:identityiq:8.1:patch1:*:*:*:*:*:*

cpe:2.3:a:sailpoint:identityiq:8.1:patch2:*:*:*:*:*:*

cpe:2.3:a:sailpoint:identityiq:8.1:patch3:*:*:*:*:*:*

cpe:2.3:a:sailpoint:identityiq:8.1:patch4:*:*:*:*:*:*

cpe:2.3:a:sailpoint:identityiq:8.1:patch5:*:*:*:*:*:*

cpe:2.3:a:sailpoint:identityiq:8.1:patch6:*:*:*:*:*:*

cpe:2.3:a:sailpoint:identityiq:8.2:-:*:*:*:*:*:*

cpe:2.3:a:sailpoint:identityiq:8.2:patch1:*:*:*:*:*:*

cpe:2.3:a:sailpoint:identityiq:8.2:patch2:*:*:*:*:*:*

cpe:2.3:a:sailpoint:identityiq:8.2:patch4:*:*:*:*:*:*

cpe:2.3:a:sailpoint:identityiq:8.3:-:*:*:*:*:*:*

cpe:2.3:a:sailpoint:identityiq:8.3:patch1:*:*:*:*:*:*

cpe:2.3:a:sailpoint:identityiq:8.4:-:*:*:*:*:*:*

EPSS

Процентиль: 23%

0.00076

Низкий

7.1 High

CVSS3

Дефекты

CWE-20

Связанные уязвимости

GHSA-x5qv-8w36-gxh4