Beveiligingsadvies

CVE-2024-3319

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-05-15 15:44:26
Laatst bijgewerkt 2024-08-16 15:01:04
Toegewezen door SailPoint
CVSS-score 9.1
Status PUBLISHED

Beschrijving

An issue was identified in the Identity Security Cloud (ISC) Transform preview and IdentityProfile preview API endpoints that allowed an authenticated administrator to execute user-defined templates as part of attribute transforms which could allow remote code execution on the host.