CVE-2024-56404

critical · 9.9

In One Identity Identity Manager 9.x before 9.3, an insecure direct object reference (IDOR) vulnerability allows privilege escalation. Only On-Premise installations are affected.

9.9

CVSS

0.7%

EPSS (exploit prob.)

51st

EPSS percentile

2025-01-24

Published

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Weaknesses

CWE-302

References

https://support.oneidentity.com/product-notification/noti-00001678
https://support.oneidentity.com/technical-documents/identity-manager/9.3/release-notes/
https://www.oneidentity.com/community/identity-manager/

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2024-56404