Description
In the Console in Soffid IAM before 3.5.39, necessary checks were not applied to some Java objects. A malicious agent could possibly execute arbitrary code in the Sync Server and compromise security.
Critical · 9.8
CVE-2024-39669
EUVD-2024-38174GHSA-v64w-g6gx-w35j
In the Console in Soffid IAM before 3.5.39, necessary checks were not applied to some Java objects. A malicious agent could possibly execut…
Published Jun 27, 2024 · Updated Aug 2, 2024 · Assigned by mitre