VYPR
← All advisories
Unrated severityNVD Advisory· Published Jan 31, 2023· Updated Mar 27, 2025

SailPoint IdentityIQ JavaServer File Path Traversal Vulnerability

CVE-2022-46835

Description

IdentityIQ 8.3 and all 8.3 patch levels prior to 8.3p2, IdentityIQ 8.2 and all 8.2 patch levels prior to 8.2p5, IdentityIQ 8.1 and all 8.1 patch levels prior to 8.1p7, IdentityIQ 8.0 and all 8.0 patch levels prior to 8.0p6 allow access to arbitrary files in the application server filesystem due to a path traversal vulnerability in JavaServer Faces (JSF) 2.2.20 documented in CVE-2020-6950.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Sailpoint/Identityiqllm-fuzzy2 versions
    >=8.0, <8.0p6, >=8.1, <8.1p7, >=8.2, <8.2p5, >=8.3, <8.3p2+ 1 more
    • (no CPE)range: >=8.0, <8.0p6, >=8.1, <8.1p7, >=8.2, <8.2p5, >=8.3, <8.3p2
    • (no CPE)range: 8.3

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.