CVE-2024-3319 — Security implication in SailPoint Identity Security Cloud IdentityProfile API Endpoints
An issue was identified in the Identity Security Cloud (ISC) Transform preview and IdentityProfile preview API endpoints that allowed an authenticated administrator to execute u…
Published: 2024-05-15 · CVSS: 9.1 · CVSS 3.1
An issue was identified in the Identity Security Cloud (ISC) Transform preview and IdentityProfile preview API endpoints that allowed an authenticated administrator to execute user-defined templates as part of attribute transforms which could allow remote code execution on the host.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7