CVE-2024-2227

This vulnerability allows access to arbitrary files in the application server file system due to a path traversal vulnerability in JavaServer Faces (JSF) 2.2.20 documented in CVE-2020-6950. The remediation for this vulnerability contained in this security fix provides additional changes to the remediation announced in May 2021 tracked by ETN IIQSAW-3585 and January 2024 tracked by IIQFW-336. This vulnerability in IdentityIQ is assigned CVE-2024-2227.

CVSS v3 10.0 CRITICAL

10.0^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 6.0

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

References

Link	Resource
https://www.sailpoint.com/security-advisories/	Vendor Advisory
https://www.sailpoint.com/security-advisories/	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:sailpoint:identityiq::::::::
	cpe:2.3:a:sailpoint:identityiq:8.1:patch1::::::
	cpe:2.3:a:sailpoint:identityiq:8.1:patch2::::::
	cpe:2.3:a:sailpoint:identityiq:8.1:patch3::::::
	cpe:2.3:a:sailpoint:identityiq:8.1:patch4::::::
	cpe:2.3:a:sailpoint:identityiq:8.1:patch5::::::
	cpe:2.3:a:sailpoint:identityiq:8.1:patch6::::::
	cpe:2.3:a:sailpoint:identityiq:8.2:-::::::
	cpe:2.3:a:sailpoint:identityiq:8.2:patch1::::::
	cpe:2.3:a:sailpoint:identityiq:8.2:patch2::::::
	cpe:2.3:a:sailpoint:identityiq:8.2:patch4::::::
	cpe:2.3:a:sailpoint:identityiq:8.2:patch5::::::
	cpe:2.3:a:sailpoint:identityiq:8.3:-::::::
	cpe:2.3:a:sailpoint:identityiq:8.3:patch1::::::
	cpe:2.3:a:sailpoint:identityiq:8.3:patch2::::::
	cpe:2.3:a:sailpoint:identityiq:8.4:-::::::

History

No history.

Information

Published : 2024-03-22 16:15

Updated : 2025-11-12 20:20

NVD link : CVE-2024-2227

Mitre link : CVE-2024-2227

CVE.ORG link : CVE-2024-2227

JSON object : View

Products Affected

sailpoint

identityiq

CWE

CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

{"id": "CVE-2024-2227", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "psirt@sailpoint.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 10.0, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 3.9}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2024-03-22T16:15:09.253", "references": [{"url": "https://www.sailpoint.com/security-advisories/", "tags": ["Vendor Advisory"], "source": "psirt@sailpoint.com"}, {"url": "https://www.sailpoint.com/security-advisories/", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "psirt@sailpoint.com", "description": [{"lang": "en", "value": "CWE-22"}]}], "descriptions": [{"lang": "en", "value": "This vulnerability allows access to arbitrary files in the application server file system due to a path traversal vulnerability in JavaServer Faces (JSF) 2.2.20 documented in CVE-2020-6950. The remediation for this vulnerability contained in this security fix provides additional changes to the remediation announced in May 2021 tracked by ETN IIQSAW-3585 and January 2024 tracked by IIQFW-336. This vulnerability in IdentityIQ is assigned CVE-2024-2227."}, {"lang": "es", "value": "Esta vulnerabilidad permite el acceso a archivos arbitrarios en el sistema de archivos del servidor de aplicaciones debido a una vulnerabilidad de path traversal en JavaServer Faces (JSF) 2.2.20 documentada en CVE-2020-6950. La soluci\u00f3n para esta vulnerabilidad contenida en esta soluci\u00f3n de seguridad proporciona cambios adicionales a la soluci\u00f3n anunciada en mayo de 2021 rastreada por ETN IIQSAW-3585 y en enero de 2024 rastreada por IIQFW-336. Esta vulnerabilidad en IdentityIQ tiene asignada CVE-2024-2227."}], "lastModified": "2025-11-12T20:20:36.150", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:sailpoint:identityiq:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C76617A8-395F-4165-983E-9B9E77DFAA10", "versionEndExcluding": "8.1"}, {"criteria": "cpe:2.3:a:sailpoint:identityiq:8.1:patch1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "216615A8-0E21-4597-871C-AC121BF0E150"}, {"criteria": "cpe:2.3:a:sailpoint:identityiq:8.1:patch2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "35ECC22F-B2A2-4750-B995-2944F12C1BFF"}, {"criteria": "cpe:2.3:a:sailpoint:identityiq:8.1:patch3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9ECEF57B-DA34-402A-86F0-713A3683A172"}, {"criteria": "cpe:2.3:a:sailpoint:identityiq:8.1:patch4:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1815D4C7-50FC-45DA-8130-E9258CAFBD09"}, {"criteria": "cpe:2.3:a:sailpoint:identityiq:8.1:patch5:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F784765E-8B3C-4F96-B57A-E6E7AECE628C"}, {"criteria": "cpe:2.3:a:sailpoint:identityiq:8.1:patch6:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A7B4F481-4E74-4B56-9851-E1A665F5783D"}, {"criteria": "cpe:2.3:a:sailpoint:identityiq:8.2:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "224129BF-667F-4F6A-8E9A-15390F6FA3D5"}, {"criteria": "cpe:2.3:a:sailpoint:identityiq:8.2:patch1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2A8C2668-C1F1-4A67-A2B3-99B5746C6A52"}, {"criteria": "cpe:2.3:a:sailpoint:identityiq:8.2:patch2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A9D91EB5-EC8E-4200-9245-13E37312343D"}, {"criteria": "cpe:2.3:a:sailpoint:identityiq:8.2:patch4:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "63352C53-ADD8-49CD-B9E6-648183BDED68"}, {"criteria": "cpe:2.3:a:sailpoint:identityiq:8.2:patch5:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DBDD484D-BF0D-4246-9701-0BF3DD2194E4"}, {"criteria": "cpe:2.3:a:sailpoint:identityiq:8.3:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1173CC53-CBE5-450C-96BF-8583D1B3D185"}, {"criteria": "cpe:2.3:a:sailpoint:identityiq:8.3:patch1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2C0F5E55-5D33-425F-9DA7-49FE66CD84C4"}, {"criteria": "cpe:2.3:a:sailpoint:identityiq:8.3:patch2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1A2FD228-E6DB-49E3-BE3E-1BF9B0434FC0"}, {"criteria": "cpe:2.3:a:sailpoint:identityiq:8.4:-:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4BC4F08D-A3FB-41F6-8EFD-6F34FBC0F75F"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@sailpoint.com"}