VYPR
← All advisories
High severity7.1NVD Advisory· Published Mar 22, 2024· Updated Jun 17, 2026

CVE-2024-2228

CVE-2024-2228

Description

This vulnerability allows an authenticated user to perform a Lifecycle Manager flow or other QuickLink for a target user outside of the defined QuickLink Population.

Affected products

19
  • Sailpoint/Identityiq17 versions
    cpe:2.3:a:sailpoint:identityiq:*:*:*:*:*:*:*:*+ 16 more
    • cpe:2.3:a:sailpoint:identityiq:*:*:*:*:*:*:*:*range: <8.1
    • cpe:2.3:a:sailpoint:identityiq:8.1:patch1:*:*:*:*:*:*
    • cpe:2.3:a:sailpoint:identityiq:8.1:patch2:*:*:*:*:*:*
    • cpe:2.3:a:sailpoint:identityiq:8.1:patch3:*:*:*:*:*:*
    • cpe:2.3:a:sailpoint:identityiq:8.1:patch4:*:*:*:*:*:*
    • cpe:2.3:a:sailpoint:identityiq:8.1:patch5:*:*:*:*:*:*
    • cpe:2.3:a:sailpoint:identityiq:8.1:patch6:*:*:*:*:*:*
    • cpe:2.3:a:sailpoint:identityiq:8.2:-:*:*:*:*:*:*
    • cpe:2.3:a:sailpoint:identityiq:8.2:patch1:*:*:*:*:*:*
    • cpe:2.3:a:sailpoint:identityiq:8.2:patch2:*:*:*:*:*:*
    • cpe:2.3:a:sailpoint:identityiq:8.2:patch4:*:*:*:*:*:*
    • cpe:2.3:a:sailpoint:identityiq:8.2:patch5:*:*:*:*:*:*
    • cpe:2.3:a:sailpoint:identityiq:8.3:-:*:*:*:*:*:*
    • cpe:2.3:a:sailpoint:identityiq:8.3:patch1:*:*:*:*:*:*
    • cpe:2.3:a:sailpoint:identityiq:8.3:patch2:*:*:*:*:*:*
    • cpe:2.3:a:sailpoint:identityiq:8.4:-:*:*:*:*:*:*
    • (no CPE)range: 8.1
  • Sailpoint/QuickLinkllm-create
  • Sailpoint/IdentityIQ Lifecycle Managerllm-fuzzy

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.