PT-2023-15067
CVE-2022-46835
·
تاريخ النشر
2023-01-31
·
تاريخ التحديث
2023-02-08
الوصف من
CVSS 3.1
8.8
عاليةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
SailPoint IdentityIQ versions 8.0 through 8.0p5
SailPoint IdentityIQ versions 8.1 through 8.1p6
SailPoint IdentityIQ versions 8.2 through 8.2p4
SailPoint IdentityIQ versions 8.3 through 8.3p1
Description
The issue allows access to arbitrary files in the application server filesystem due to a path traversal vulnerability in JavaServer Faces (JSF) 2.2.20.
Recommendations
For SailPoint IdentityIQ versions 8.0 through 8.0p5, update to version 8.0p6 or later.
For SailPoint IdentityIQ versions 8.1 through 8.1p6, update to version 8.1p7 or later.
For SailPoint IdentityIQ versions 8.2 through 8.2p4, update to version 8.2p5 or later.
For SailPoint IdentityIQ versions 8.3 through 8.3p1, update to version 8.3p2 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾