CVE:CVE-2022-45435
CNNVD:CNNVD-202301-2418
IdentityIQ是IdentityIQ公司的一款安全软件。提供信用监控、身份保险和防病毒。
IdentityIQ存在安全漏洞，该漏洞源于允许被分配了身份管理员能力或任何包含权利自定义能力的认证用户修改工作项目转发配置。
solution:Upgrade sailpoint identityiq to a higher version than 8.0,8.0,8.0:patch1,8.0:patch2,8.0:patch3,8.0:patch4,8.0:patch5,8.1,8.1:patch1,8.1:patch2,8.1:patch3,8.1:patch4,8.1:patch5,8.1:patch6,8.2,8.2:patch1,8.2:patch2,8.2:patch4,8.3,8.3:patch1,and avoid the version (,8.0),8.0,8.0:patch1,8.0:patch2,8.0:patch3,8.0:patch4,8.0:patch5,8.1,8.1:patch1,8.1:patch2,8.1:patch3,8.1:patch4,8.1:patch5,8.1:patch6,8.2,8.2:patch1,8.2:patch2,8.2:patch4,8.3,8.3:patch1