SailPoint IdentityIQ 安全漏洞

SailPoint IdentityIQ is a security software developed by SailPoint Corporation. It provides credit monitoring, identity protection, and antivirus features. SailPoint IdentityIQ has a security vulnerability that stems from allowing authenticated identity roles to edit role definitions without havi...

Improper Authentication And Authorization

github.com/openbao/openbao-plugins is vulnerable to Improper Authentication and Authorization. The vulnerability is due to insufficient validation of IAM role identity across AWS accounts, which allows an attacker from an untrusted account to impersonate a same-named role in a trusted account and...