The vulnerability is a perfect 10/10 severity issue in SailPoint's IdentityIQ IAM platform, identified as CVE-2024-10905, indicating a serious risk for users.
Directory traversal vulnerabilities, like the one found in SailPoint's IDentityIQ, allow unauthorized access to sensitive files, leading to potential system compromise.
CISA warns that directory traversal flaws persist due to manufacturers not treating user input as malicious, emphasizing the need for better cybersecurity practices.
MITRE labeled directory traversals as 'unforgivable,' noting their exploitability due to poor input sanitization in software, highlighting a critical area for security improvement.
Collection
[
|
...
]