CVE-2024-56404

Summary

In One Identity Identity Manager 9.x before 9.3, an insecure direct object reference (IDOR) vulnerability allows privilege escalation. Only On-Premise installations are affected.

Affected Software

Weaknesses

• CWE-302: CWE-302 Authentication Bypass by Assumed-Immutable Data

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: total

References

• https://www.oneidentity.com/community/identity-manager/
• https://support.oneidentity.com/technical-documents/identity-manager/9.3/release-notes/
• https://support.oneidentity.com/product-notification/noti-00001678

• ←Previous
• Next→