This vulnerability allows access to arbitrary files in the application server file system due to a path traversal vulnerability in JavaServer Faces (JSF) 2.2.20 documented in CVE-2020-6950. The remediation for this vulnerability contained in this security fix provides additional changes to the remediation announced in May 2021 tracked by ETN IIQSAW-3585 and January 2024 tracked by IIQFW-336. This vulnerability in IdentityIQ is assigned CVE-2024-2227.
Metrics
Affected Vendors & Products
References
Link | Providers |
---|---|
https://www.sailpoint.com/security-advisories/ |
History
No history.
MITRE
Status: PUBLISHED
Assigner: SailPoint
Published: 2024-03-22T15:43:12.869Z
Updated: 2024-08-01T19:03:39.142Z
Reserved: 2024-03-06T17:01:38.789Z
Link: CVE-2024-2227
Vulnrichment
Updated: 2024-08-01T19:03:39.142Z
NVD
Status : Awaiting Analysis
Published: 2024-03-22T16:15:09.253
Modified: 2024-03-22T19:02:10.300
Link: CVE-2024-2227
Redhat
No data.