Products
UNKNOWN
DelimitedFileConnector Cloud Connector
Source
psirt@sailpoint.com
Tags
CVE-2024-3318 details
Published : May 15, 2024, 4:15 p.m.
Last Modified : May 15, 2024, 4:40 p.m.
Last Modified : May 15, 2024, 4:40 p.m.
Description
A file path traversal vulnerability was identified in the DelimitedFileConnector Cloud Connector that allowed an authenticated administrator to set arbitrary connector attributes, including the “file“ attribute, which in turn allowed the user to access files uploaded for other sources.
CVSS Score
| 1 | 2 | 3 | 4.2 | 5 | 6 | 7 | 8 | 9 | 10 |
|---|
Weakness
| Weakness | Name | Description |
|---|
CVSS Data
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
HIGH
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
Base Score
4.2
Exploitability Score
Impact Score
Base Severity
MEDIUM
Vector String : CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:N
References
| URL | Source |
|---|---|
| https://www.sailpoint.com/security-advisories/ | psirt@sailpoint.com |
This website uses the NVD API, but is not approved or certified by it.