« Volver al listado

CVE-2024-1714

Estado: AnalizadaAlta (7.1)—

An issue exists in all supported versions of IdentityIQ Lifecycle Manager that can result if an entitlement with a value containing leading or trailing whitespace is requested by an authenticated user in an access request.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Sailpoint — Identityiq

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2024-1714",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-1714",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-03-06T19:02:28.625676Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "psirt@sailpoint.com",
        "cvssData": {
          "scope": "CHANGED",
          "version": "3.1",
          "baseScore": 7.1,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:L/A:L",
          "integrityImpact": "LOW",
          "userInteraction": "REQUIRED",
          "attackComplexity": "HIGH",
          "availabilityImpact": "LOW",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.3,
        "exploitabilityScore": 1.3
      },
      {
        "type": "Secondary",
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "cvssData": {
          "scope": "CHANGED",
          "version": "3.1",
          "baseScore": 7.1,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:L/A:L",
          "integrityImpact": "LOW",
          "userInteraction": "REQUIRED",
          "attackComplexity": "HIGH",
          "availabilityImpact": "LOW",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.3,
        "exploitabilityScore": 1.3
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@sailpoint.com",
      "affectedData": [
        {
          "vendor": "SailPoint",
          "product": "IdentityIQ",
          "versions": [
            {
              "status": "affected",
              "version": "8.2",
              "lessThan": "8.2p7",
              "versionType": "semver"
            },
            {
              "status": "affected",
              "version": "8.3",
              "lessThan": "8.3p4",
              "versionType": "semver"
            },
            {
              "status": "affected",
              "version": "8.4",
              "lessThan": "8.4p1",
              "versionType": "semver"
            }
          ],
          "defaultStatus": "unknown"
        }
      ]
    }
  ],
  "published": "2024-02-21T17:15:09.003",
  "references": [
    {
      "url": "https://www.sailpoint.com/security-advisories/sailpoint-identityiq-access-request-for-entitlement-values-with-leading-trailing-whitespace-cve-2024-1714/",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "psirt@sailpoint.com"
    },
    {
      "url": "https://www.sailpoint.com/security-advisories/sailpoint-identityiq-access-request-for-entitlement-values-with-leading-trailing-whitespace-cve-2024-1714/",
      "tags": [
        "Third Party Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "psirt@sailpoint.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "An issue exists in all supported versions of IdentityIQ Lifecycle Manager that can result if an entitlement with a value containing leading or trailing whitespace is requested by an authenticated user in an access request."
    },
    {
      "lang": "es",
      "value": "Existe un problema en todas las versiones compatibles de IdentityIQ Lifecycle Manager que puede surgir si un usuario autenticado solicita un derecho con un valor que contiene espacios en blanco al principio o al final en una solicitud de acceso."
    }
  ],
  "lastModified": "2026-06-17T07:04:51.247",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:sailpoint:identityiq:8.1:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "00C8E5FB-5B6D-4C1B-AEFE-C884B28392D8"
            },
            {
              "criteria": "cpe:2.3:a:sailpoint:identityiq:8.1:patch1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "216615A8-0E21-4597-871C-AC121BF0E150"
            },
            {
              "criteria": "cpe:2.3:a:sailpoint:identityiq:8.1:patch2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "35ECC22F-B2A2-4750-B995-2944F12C1BFF"
            },
            {
              "criteria": "cpe:2.3:a:sailpoint:identityiq:8.1:patch3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9ECEF57B-DA34-402A-86F0-713A3683A172"
            },
            {
              "criteria": "cpe:2.3:a:sailpoint:identityiq:8.1:patch4:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1815D4C7-50FC-45DA-8130-E9258CAFBD09"
            },
            {
              "criteria": "cpe:2.3:a:sailpoint:identityiq:8.1:patch5:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F784765E-8B3C-4F96-B57A-E6E7AECE628C"
            },
            {
              "criteria": "cpe:2.3:a:sailpoint:identityiq:8.1:patch6:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A7B4F481-4E74-4B56-9851-E1A665F5783D"
            },
            {
              "criteria": "cpe:2.3:a:sailpoint:identityiq:8.2:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "224129BF-667F-4F6A-8E9A-15390F6FA3D5"
            },
            {
              "criteria": "cpe:2.3:a:sailpoint:identityiq:8.2:patch1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2A8C2668-C1F1-4A67-A2B3-99B5746C6A52"
            },
            {
              "criteria": "cpe:2.3:a:sailpoint:identityiq:8.2:patch2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A9D91EB5-EC8E-4200-9245-13E37312343D"
            },
            {
              "criteria": "cpe:2.3:a:sailpoint:identityiq:8.2:patch4:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "63352C53-ADD8-49CD-B9E6-648183BDED68"
            },
            {
              "criteria": "cpe:2.3:a:sailpoint:identityiq:8.3:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1173CC53-CBE5-450C-96BF-8583D1B3D185"
            },
            {
              "criteria": "cpe:2.3:a:sailpoint:identityiq:8.3:patch1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2C0F5E55-5D33-425F-9DA7-49FE66CD84C4"
            },
            {
              "criteria": "cpe:2.3:a:sailpoint:identityiq:8.4:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4BC4F08D-A3FB-41F6-8EFD-6F34FBC0F75F"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@sailpoint.com"
}