CVE-2024-2228 IdentityIQ Authorization of QuickLink Target Identities Vulnerability

This vulnerability allows an authenticated user to perform a Lifecycle Manager flow or other QuickLink for a target user outside of the defined QuickLink Population...

CVE-2024-2228

The CVE-2024-2228 issue relates to IdentityIQ/QuickLink authorization in SAP Lifecycle Manager. Connected sources indicate an authenticated user can perform a Lifecycle Manager flow or other QuickLink targeting a user outside the defined QuickLink Population. The root cause details are not fully ...