{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-06-21T18:41:10.032","vulnerabilities":[{"cve":{"id":"CVE-2024-2228","sourceIdentifier":"psirt@sailpoint.com","published":"2024-03-22T16:15:09.757","lastModified":"2026-06-17T07:23:58.693","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"This vulnerability allows an authenticated user to perform a Lifecycle Manager flow or other QuickLink for a target user outside of the defined QuickLink Population."},{"lang":"es","value":"Esta vulnerabilidad permite a un usuario autenticado realizar un flujo de Lifecycle Manager u otro QuickLink para un usuario de destino fuera de la población de QuickLink definida."}],"affected":[{"source":"psirt@sailpoint.com","affectedData":[{"vendor":"SailPoint","product":"IdentityIQ","defaultStatus":"unknown","versions":[{"version":"8.1","lessThan":"8.1p7","versionType":"semver","status":"affected"},{"version":"8.2","lessThan":"8.2p7","versionType":"semver","status":"affected"},{"version":"8.3","lessThan":"8.3p4","versionType":"semver","status":"affected"},{"version":"8.4","lessThan":"8.4p1","versionType":"semver","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@sailpoint.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H","baseScore":7.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":1.2,"impactScore":5.9},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","baseScore":8.8,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.8,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-03-22T18:33:57.066222Z","id":"CVE-2024-2228","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@sailpoint.com","type":"Secondary","description":[{"lang":"en","value":"CWE-269"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sailpoint:identityiq:*:*:*:*:*:*:*:*","versionEndExcluding":"8.1","matchCriteriaId":"C76617A8-395F-4165-983E-9B9E77DFAA10"},{"vulnerable":true,"criteria":"cpe:2.3:a:sailpoint:identityiq:8.1:patch1:*:*:*:*:*:*","matchCriteriaId":"216615A8-0E21-4597-871C-AC121BF0E150"},{"vulnerable":true,"criteria":"cpe:2.3:a:sailpoint:identityiq:8.1:patch2:*:*:*:*:*:*","matchCriteriaId":"35ECC22F-B2A2-4750-B995-2944F12C1BFF"},{"vulnerable":true,"criteria":"cpe:2.3:a:sailpoint:identityiq:8.1:patch3:*:*:*:*:*:*","matchCriteriaId":"9ECEF57B-DA34-402A-86F0-713A3683A172"},{"vulnerable":true,"criteria":"cpe:2.3:a:sailpoint:identityiq:8.1:patch4:*:*:*:*:*:*","matchCriteriaId":"1815D4C7-50FC-45DA-8130-E9258CAFBD09"},{"vulnerable":true,"criteria":"cpe:2.3:a:sailpoint:identityiq:8.1:patch5:*:*:*:*:*:*","matchCriteriaId":"F784765E-8B3C-4F96-B57A-E6E7AECE628C"},{"vulnerable":true,"criteria":"cpe:2.3:a:sailpoint:identityiq:8.1:patch6:*:*:*:*:*:*","matchCriteriaId":"A7B4F481-4E74-4B56-9851-E1A665F5783D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sailpoint:identityiq:8.2:-:*:*:*:*:*:*","matchCriteriaId":"224129BF-667F-4F6A-8E9A-15390F6FA3D5"},{"vulnerable":true,"criteria":"cpe:2.3:a:sailpoint:identityiq:8.2:patch1:*:*:*:*:*:*","matchCriteriaId":"2A8C2668-C1F1-4A67-A2B3-99B5746C6A52"},{"vulnerable":true,"criteria":"cpe:2.3:a:sailpoint:identityiq:8.2:patch2:*:*:*:*:*:*","matchCriteriaId":"A9D91EB5-EC8E-4200-9245-13E37312343D"},{"vulnerable":true,"criteria":"cpe:2.3:a:sailpoint:identityiq:8.2:patch4:*:*:*:*:*:*","matchCriteriaId":"63352C53-ADD8-49CD-B9E6-648183BDED68"},{"vulnerable":true,"criteria":"cpe:2.3:a:sailpoint:identityiq:8.2:patch5:*:*:*:*:*:*","matchCriteriaId":"DBDD484D-BF0D-4246-9701-0BF3DD2194E4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sailpoint:identityiq:8.3:-:*:*:*:*:*:*","matchCriteriaId":"1173CC53-CBE5-450C-96BF-8583D1B3D185"},{"vulnerable":true,"criteria":"cpe:2.3:a:sailpoint:identityiq:8.3:patch1:*:*:*:*:*:*","matchCriteriaId":"2C0F5E55-5D33-425F-9DA7-49FE66CD84C4"},{"vulnerable":true,"criteria":"cpe:2.3:a:sailpoint:identityiq:8.3:patch2:*:*:*:*:*:*","matchCriteriaId":"1A2FD228-E6DB-49E3-BE3E-1BF9B0434FC0"},{"vulnerable":true,"criteria":"cpe:2.3:a:sailpoint:identityiq:8.4:-:*:*:*:*:*:*","matchCriteriaId":"4BC4F08D-A3FB-41F6-8EFD-6F34FBC0F75F"}]}]}],"references":[{"url":"https://www.sailpoint.com/security-advisories/","source":"psirt@sailpoint.com","tags":["Vendor Advisory"]},{"url":"https://www.sailpoint.com/security-advisories/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}}]}