Security Advisory

CVE-2024-3319

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-05-15 15:44:26
Last updated 2024-08-16 15:01:04
Assigner SailPoint
State PUBLISHED

Description

An issue was identified in the Identity Security Cloud (ISC) Transform preview and IdentityProfile preview API endpoints that allowed an authenticated administrator to execute user-defined templates as part of attribute transforms which could allow remote code execution on the host.