identityiq Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/identityiq/ Thu, 23 Feb 2023 05:21:26 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png identityiq Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/identityiq/ 32 32 CVE-2022-45435 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-45435/ Thu, 23 Feb 2023 05:21:26 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-45435/ IdentityIQ 8.3 and all 8.3 patch levels prior to 8.3p2, IdentityIQ 8.2 and all 8.2 patch levels prior to 8.2p5, IdentityIQ 8.1 and all 8.1 patch levels prior to 8.1p7, IdentityIQ 8.0 and all 8.0 patch levels prior to 8.0p6, and all prior versions allow authenticated users assigned the Identity Administrator capability or any custom […]

The post CVE-2022-45435 appeared first on CVE Vulnerability.

]]> IdentityIQ 8.3 and all 8.3 patch levels prior to 8.3p2, IdentityIQ 8.2 and all 8.2 patch levels prior to 8.2p5, IdentityIQ 8.1 and all 8.1 patch levels prior to 8.1p7, IdentityIQ 8.0 and all 8.0 patch levels prior to 8.0p6, and all prior versions allow authenticated users assigned the Identity Administrator capability or any custom capability that contains the SetIdentityForwarding right to modify the work item forwarding configuration for identities other than the ones that should be allowed by Lifecycle Manager Quicklink Population configuration.

The post CVE-2022-45435 appeared first on CVE Vulnerability.

]]> CVE-2022-46835 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-46835/ Fri, 03 Feb 2023 12:10:10 +0000 http://www.cvevulnerability.com/?cve_vulnerabilities=cve-2022-46835 IdentityIQ 8.3 and all 8.3 patch levels prior to 8.3p2, IdentityIQ 8.2 and all 8.2 patch levels prior to 8.2p5, IdentityIQ 8.1 and all 8.1 patch levels prior to 8.1p7, IdentityIQ 8.0 and all 8.0 patch levels prior to 8.0p6 allow access to arbitrary files in the application server filesystem due to a path traversal […]

The post CVE-2022-46835 appeared first on CVE Vulnerability.

]]> IdentityIQ 8.3 and all 8.3 patch levels prior to 8.3p2, IdentityIQ 8.2 and all 8.2 patch levels prior to 8.2p5, IdentityIQ 8.1 and all 8.1 patch levels prior to 8.1p7, IdentityIQ 8.0 and all 8.0 patch levels prior to 8.0p6 allow access to arbitrary files in the application server filesystem due to a path traversal vulnerability in JavaServer Faces (JSF) 2.2.20 documented in CVE-2020-6950.

The post CVE-2022-46835 appeared first on CVE Vulnerability.

]]>