CVE-2024-1714
CVSS 3.1 Score 7.1 of 10 (high)
Details
Published Feb 21, 2024
Updated: Dec 18, 2024
CWE ID 20
CWE ID 1284
Summary
CVE-2024-1714 is a vulnerability affecting all versions of IdentityIQ Lifecycle Manager. It arises when an authenticated user submits an access request with an entitlement that includes leading or trailing whitespace. This issue could potentially allow the user to bypass intended access restrictions, posing a security risk. It is recommended that affected organizations apply the necessary patches or updates to mitigate this vulnerability.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.