CVE-2024-2228

This vulnerability allows an authenticated user to perform a Lifecycle Manager flow or other QuickLink for a target user outside of the defined QuickLink Population.

Score

CVSS 3.1 8.8 High

Status

Analyzed - psirt@sailpoint.com

Published

2024-03-22

Last modified

2024-08-01

Weaknesses

CWE-269

Affected products

• Identityiq (Sailpoint)

References

• https://www.sailpoint.com/security-advisories/