CVE:CVE-2022-46835
CNNVD:CNNVD-202301-2417
IdentityIQ是IdentityIQ公司的一款安全软件。提供信用监控、身份保险和防病毒。
IdentitylQ存在安全漏洞，该漏洞源于存在路径遍历，允许访问应用程序服务器文件系统中的任意文件。
solution:Upgrade sailpoint identityiq to a higher version than 8.0,8.0:patch1,8.0:patch2,8.0:patch3,8.0:patch4,8.0:patch5,8.1,8.1:patch1,8.1:patch2,8.1:patch3,8.1:patch4,8.1:patch5,8.1:patch6,8.2,8.2:patch1,8.2:patch2,8.2:patch4,8.3,8.3:patch1,and avoid the version 8.0,8.0:patch1,8.0:patch2,8.0:patch3,8.0:patch4,8.0:patch5,8.1,8.1:patch1,8.1:patch2,8.1:patch3,8.1:patch4,8.1:patch5,8.1:patch6,8.2,8.2:patch1,8.2:patch2,8.2:patch4,8.3,8.3:patch1