CVE-2024-10905: IdentityIQ Improper Access Control VulnerabilityIdentityIQ Improper Access Control Vulnerability
10.0
CVSS
Description
IdentityIQ 8.4 and all 8.4 patch levels prior to 8.4p2, IdentityIQ 8.3 and all 8.3 patch levels prior to 8.3p5, IdentityIQ 8.2 and all 8.2 patch levels prior to 8.2p8, and all prior versions allows HTTP access to static content in the IdentityIQ application directory that should be protected.
Classification
CVE ID: CVE-2024-10905
CVSS Base Severity: CRITICAL
CVSS Base Score: 10.0
Affected Products
Vendor: SailPoint Technologies
Product: IdentityIQ
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.04% (probability of being exploited)
EPSS Percentile: 11.44% (scored less or equal to compared to others)
EPSS Date: 2025-02-03 (when was this score calculated)