Skip to content
OpenAdvisories
High · 7.1 CVE-2024-2228 EUVD-2024-27184GHSA-wv97-q48c-w5m2

IdentityIQ Authorization of QuickLink Target Identities Vulnerability

Published Mar 22, 2024 · Updated Aug 1, 2024 · Assigned by SailPoint

Description

This vulnerability allows an authenticated user to perform a Lifecycle Manager flow or other QuickLink for a target user outside of the defined QuickLink Population.

Affected products

VendorProductAffectedFixed
SailPoint IdentityIQ 8.1 – < 8.1p7, 8.2 – < 8.2p7, 8.3 – < 8.3p4, 8.4 – < 8.4p1 8.1p7

References