CVE-2024-10905

概要

参考情報

• sailpoint.com/security-advisories/identityiq-improper-access-control-vulnerability-cve-2024-10905 · Vendor Advisory

identityiq のその他の脆弱性

• CVE-2026-12341緊急 9.8This vulnerability impacts all versions of IdentityIQ and allows an unauthenticated attacker unauthorized access to protected APIs and data …
• CVE-2026-5712高 8.8This vulnerability impacts all versions of IdentityIQ and allows an authenticated identity that is the requestor or assignee of a work item …
• CVE-2025-10280中 6.1IdentityIQ 8.5, IdentityIQ 8.4 and all 8.4 patch levels prior to 8.4p4, IdentityIQ 8.3 and all 8.3 patch levels including 8.3p5, and all pri…
• CVE-2024-2228高 8.8This vulnerability allows an authenticated user to perform a Lifecycle Manager flow or other QuickLink for a target user outside of the defi…
• CVE-2024-2227高 7.5This vulnerability allows access to arbitrary files in the application server file system due to a path traversal vulnerability in JavaServe…