CVE-2024-56404

In One Identity Identity Manager 9.x before 9.3, an insecure direct object reference (IDOR) vulnerability allows privilege escalation. Only On-Premise installations are affected.

Score

CVSS 3.1 9.9 Critical

Status

Deferred - cve@mitre.org

Published

2025-01-24

Last modified

2025-01-24

Weaknesses

CWE-302

Affected products

• Identity Manager (Oneidentity)

References

• https://support.oneidentity.com/product-notification/noti-00001678
• https://support.oneidentity.com/technical-documents/identity-manager/9.3/release-notes/
• https://www.oneidentity.com/community/identity-manager/