CVE-2024-3317

6.5MEDIUM

An improper access control was identified in the Identity Security Cloud (ISC) message server API that allowed an authenticated user to exfiltrate job processing metadata (opaque messageIDs, work queu

Veröffentlicht: 5/15/2024Aktualisiert: 11/21/2024
Auf NVD ansehenAuf MITRE ansehen

Beschreibung

An improper access control was identified in the Identity Security Cloud (ISC) message server API that allowed an authenticated user to exfiltrate job processing metadata (opaque messageIDs, work queue depth and counts) for other tenants.

KI-AnalyseKI-gestützt

Referenzen