Skip to content
OpenAdvisories
Critical · 9.1 CVE-2024-3319 EUVD-2024-31909GHSA-c24r-pxmj-hx9h

Security implication in SailPoint Identity Security Cloud IdentityProfile API Endpoints

Published May 15, 2024 · Updated Aug 16, 2024 · Assigned by SailPoint

Description

An issue was identified in the Identity Security Cloud (ISC) Transform preview and IdentityProfile preview API endpoints that allowed an authenticated administrator to execute user-defined templates as part of attribute transforms which could allow remote code execution on the host.

Affected products

VendorProductAffectedFixed
SailPoint Identity Security Cloud — —

References