CVE-2024-2228: 
SailPoint IdentityIQ vulnerability analysis and mitigation

CVE-2024-2228 is a vulnerability in SailPoint IdentityIQ that allows an authenticated user to perform unauthorized Lifecycle Manager flow or QuickLink operations for target users outside of the defined QuickLink Population. The vulnerability was discovered and disclosed on March 22, 2024, affecting SailPoint Technologies products (NVD).

The vulnerability has been assigned a CVSS v3.1 base score of 7.1 (HIGH) with the following vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H. This indicates that the vulnerability requires network access, has high attack complexity, needs low privileges, requires user interaction, and if exploited could result in high impacts to confidentiality, integrity, and availability. The vulnerability is classified under CWE-269 (Improper Privilege Management) (NVD).

If exploited, this vulnerability allows an authenticated attacker to bypass intended access restrictions and perform unauthorized Lifecycle Manager flows or QuickLink operations on users who should be outside their scope of access. This could lead to unauthorized access management actions being performed on target users' accounts (NVD).

The vulnerability requires an authenticated user account with low privileges to exploit. The attack complexity is considered high, and user interaction is required for successful exploitation. No public exploits are known to be available at this time (NVD).

SailPoint has released security advisories addressing this vulnerability. Organizations using affected SailPoint products should review and implement the recommended security updates (SailPoint Advisory).