Lucene search
HistoryFeb 21, 2024 - 5:15 p.m.
CVE-2024-1714
identityiq
vulnerability
whitespace
access request
7.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:L/A:L
0.0004 Low
EPSS
Percentile
9.1%
An issue exists in all supported versions of IdentityIQ Lifecycle Manager that can result if an entitlement with a value containing leading or trailing whitespace is requested by an authenticated user in an access request.
Related
cve
cve
CVE-2024-1714
2024-02-21 17:15:09
cvelist
cvelist
prion
prion
Cross site request forgery (csrf)
2024-02-21 17:15:00
7.1 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:L/A:L
0.0004 Low
EPSS
Percentile
9.1%
Related for NVD:CVE-2024-1714