Skip to content
OpenAdvisories
High · 7.1 CVE-2024-1714 EUVD-2024-17448GHSA-x5qv-8w36-gxh4

Access Request for Entitlement Values with Leading/Trailing Whitespace

Published Feb 21, 2024 · Updated Aug 26, 2025 · Assigned by SailPoint

Description

An issue exists in all supported versions of IdentityIQ Lifecycle Manager that can result if an entitlement with a value containing leading or trailing whitespace is requested by an authenticated user in an access request.

Affected products

VendorProductAffectedFixed
SailPoint IdentityIQ 8.2 – < 8.2p7, 8.3 – < 8.3p4, 8.4 – < 8.4p1 8.2p7

References