CVE-2022-45435

IdentityIQ 8.3 and all 8.3 patch levels prior to 8.3p2, IdentityIQ 8.2 and all 8.2 patch levels prior to 8.2p5, IdentityIQ 8.1 and all 8.1 patch levels prior to 8.1p7, IdentityIQ 8.0 and all 8.0 patch levels prior to 8.0p6, and all prior versions allow authenticated users assigned the Identity Administrator capability or any custom capability that contains the SetIdentityForwarding right to modify the work item forwarding configuration for identities other than the ones that should be allowed by Lifecycle Manager Quicklink Population configuration.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:sailpoint:identityiq:*:*:*:*:*:*:*:*
cpe:2.3:a:sailpoint:identityiq:8.0:-:*:*:*:*:*:*
cpe:2.3:a:sailpoint:identityiq:8.0:patch1:*:*:*:*:*:*
cpe:2.3:a:sailpoint:identityiq:8.0:patch2:*:*:*:*:*:*
cpe:2.3:a:sailpoint:identityiq:8.0:patch3:*:*:*:*:*:*
cpe:2.3:a:sailpoint:identityiq:8.0:patch4:*:*:*:*:*:*
cpe:2.3:a:sailpoint:identityiq:8.0:patch5:*:*:*:*:*:*
cpe:2.3:a:sailpoint:identityiq:8.1:-:*:*:*:*:*:*
cpe:2.3:a:sailpoint:identityiq:8.1:patch1:*:*:*:*:*:*
cpe:2.3:a:sailpoint:identityiq:8.1:patch2:*:*:*:*:*:*
cpe:2.3:a:sailpoint:identityiq:8.1:patch3:*:*:*:*:*:*
cpe:2.3:a:sailpoint:identityiq:8.1:patch4:*:*:*:*:*:*
cpe:2.3:a:sailpoint:identityiq:8.1:patch5:*:*:*:*:*:*
cpe:2.3:a:sailpoint:identityiq:8.1:patch6:*:*:*:*:*:*
cpe:2.3:a:sailpoint:identityiq:8.2:-:*:*:*:*:*:*
cpe:2.3:a:sailpoint:identityiq:8.2:patch1:*:*:*:*:*:*
cpe:2.3:a:sailpoint:identityiq:8.2:patch2:*:*:*:*:*:*
cpe:2.3:a:sailpoint:identityiq:8.2:patch4:*:*:*:*:*:*
cpe:2.3:a:sailpoint:identityiq:8.3:-:*:*:*:*:*:*
cpe:2.3:a:sailpoint:identityiq:8.3:patch1:*:*:*:*:*:*

History

21 Nov 2024, 07:29

Type Values Removed Values Added
References () https://www.sailpoint.com/security-advisories/sailpoint-identityiq-identity-forwarding-vulnerability-cve-2022-45435/ - Vendor Advisory () https://www.sailpoint.com/security-advisories/sailpoint-identityiq-identity-forwarding-vulnerability-cve-2022-45435/ - Vendor Advisory
Summary
  • (es) IdentityIQ 8.3 y todos los niveles de parche 8.3 anteriores a 8.3p2, IdentityIQ 8.2 y todos los niveles de parche 8.2 anteriores a 8.2p5, IdentityIQ 8.1 y todos los niveles de parche 8.1 anteriores a 8.1p7, IdentityIQ 8.0 y todos los niveles de parche 8.0 anteriores a 8.0p6, y todos Las versiones anteriores permiten a los usuarios autenticados a los que se les ha asignado la capacidad de Administrador de identidades o cualquier capacidad personalizada que contenga el derecho SetIdentityForwarding modificar la configuración de reenvío de elementos de trabajo para identidades distintas a las que deberían permitirse mediante la configuración de Población de enlaces rápidos de Lifecycle Manager.
CVSS v2 : unknown
v3 : 6.5
v2 : unknown
v3 : 6.8

Information

Published : 2023-01-31 15:15

Updated : 2024-11-21 07:29


NVD link : CVE-2022-45435

Mitre link : CVE-2022-45435

CVE.ORG link : CVE-2022-45435


JSON object : View

Products Affected

sailpoint

  • identityiq
CWE
CWE-863

Incorrect Authorization