Описание
This vulnerability allows an authenticated user to perform a Lifecycle Manager flow or other QuickLink for a target user outside of the defined QuickLink Population.
Ссылки
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 8.1 (исключая)
Одно из
cpe:2.3:a:sailpoint:identityiq:*:*:*:*:*:*:*:*
cpe:2.3:a:sailpoint:identityiq:8.1:patch1:*:*:*:*:*:*
cpe:2.3:a:sailpoint:identityiq:8.1:patch2:*:*:*:*:*:*
cpe:2.3:a:sailpoint:identityiq:8.1:patch3:*:*:*:*:*:*
cpe:2.3:a:sailpoint:identityiq:8.1:patch4:*:*:*:*:*:*
cpe:2.3:a:sailpoint:identityiq:8.1:patch5:*:*:*:*:*:*
cpe:2.3:a:sailpoint:identityiq:8.1:patch6:*:*:*:*:*:*
cpe:2.3:a:sailpoint:identityiq:8.2:-:*:*:*:*:*:*
cpe:2.3:a:sailpoint:identityiq:8.2:patch1:*:*:*:*:*:*
cpe:2.3:a:sailpoint:identityiq:8.2:patch2:*:*:*:*:*:*
cpe:2.3:a:sailpoint:identityiq:8.2:patch4:*:*:*:*:*:*
cpe:2.3:a:sailpoint:identityiq:8.2:patch5:*:*:*:*:*:*
cpe:2.3:a:sailpoint:identityiq:8.3:-:*:*:*:*:*:*
cpe:2.3:a:sailpoint:identityiq:8.3:patch1:*:*:*:*:*:*
cpe:2.3:a:sailpoint:identityiq:8.3:patch2:*:*:*:*:*:*
cpe:2.3:a:sailpoint:identityiq:8.4:-:*:*:*:*:*:*
EPSS
Процентиль: 43%
0.00209
Низкий
7.1 High
CVSS3
8.8 High
CVSS3
Дефекты
CWE-269
Связанные уязвимости
CVSS3: 7.1
github
почти 2 года назад
This vulnerability allows an authenticated user to perform a Lifecycle Manager flow or other QuickLink for a target user outside of the defined QuickLink Population.
EPSS
Процентиль: 43%
0.00209
Низкий
7.1 High
CVSS3
8.8 High
CVSS3
Дефекты
CWE-269