Perfect 10 directory traversal vuln hits SailPoint’s IAM solution
December 3, 2024 at 06:55PM SailPoint reported a critical vulnerability (CVE-2024-10905) in its IdentityIQ IAM platform, classified as a directory traversal flaw. Customers are urged to upgrade to versions 8.4p2, 8.3p5, and 8.2p8. No advisory has been issued, and the company did not respond to inquiries about possible exploits. **Meeting Takeaways: Major Vulnerability in SailPoint … Read more