CVE-2026-5712

Опубликовано: 29 апр. 2026

Источник: nvd

CVSS3: 8

CVSS3: 8.8

EPSS Низкий

Описание

This vulnerability impacts all versions of IdentityIQ and allows an authenticated identity that is the requestor or assignee of a work item to edit the definition of a role without having an assigned capability that would allow role editing.

Ссылки

https://www.sailpoint.com/security-advisories/sailpoint-identityiq-role-editor-incorrect-authorization-vulnerability-cve-2026-5712
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:sailpoint:identityiq:*:*:*:*:*:*:*:*

Версия до 8.3 (исключая)

cpe:2.3:a:sailpoint:identityiq:8.3:-:*:*:*:*:*:*

cpe:2.3:a:sailpoint:identityiq:8.3:patch1:*:*:*:*:*:*

cpe:2.3:a:sailpoint:identityiq:8.3:patch2:*:*:*:*:*:*

cpe:2.3:a:sailpoint:identityiq:8.3:patch4:*:*:*:*:*:*

cpe:2.3:a:sailpoint:identityiq:8.4:-:*:*:*:*:*:*

cpe:2.3:a:sailpoint:identityiq:8.4:patch1:*:*:*:*:*:*

cpe:2.3:a:sailpoint:identityiq:8.4:patch2:*:*:*:*:*:*

cpe:2.3:a:sailpoint:identityiq:8.5:-:*:*:*:*:*:*

cpe:2.3:a:sailpoint:identityiq:8.5:patch1:*:*:*:*:*:*

EPSS

Процентиль: 6%

0.00163

Низкий

8 High

CVSS3

8.8 High

CVSS3

Дефекты

CWE-863

Связанные уязвимости

GHSA-77mr-jp79-jwp3

CVSS3: 8

github

4 месяца назад

EPSS

Процентиль: 6%

0.00163

Низкий

8 High

CVSS3

8.8 High

CVSS3

Дефекты

CWE-863