CVE-2024-3318: SailPoint Identity Security Cloud Connector File Path Traversal Vulnerability
A file path traversal vulnerability was identified in the DelimitedFileConnector Cloud Connector that allowed an authenticated administrator to set arbitrary connector attributes, including the “file“ attribute, which in turn allowed the user to access files uploaded for other sources.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-3318?
CVE-2024-3318 has been rated as a high severity vulnerability due to its potential for unauthorized file access.
How do I fix CVE-2024-3318?
To fix CVE-2024-3318, apply the latest update or patch provided by SailPoint for the Identity Security Cloud Connector.
Who is affected by CVE-2024-3318?
CVE-2024-3318 affects users of the SailPoint Identity Security Cloud Connector who have administrative access.
What type of vulnerability is CVE-2024-3318?
CVE-2024-3318 is classified as a file path traversal vulnerability.
What can an attacker achieve with CVE-2024-3318?
An attacker exploiting CVE-2024-3318 may gain access to files intended for other source systems by manipulating connector attributes.