IAM vulnerabilities

1 known vulnerability in IAM from Soffid. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  iam: Improper Control of Generation of Code

  CVE-2024-39669Jun 27, 2024Soffid

  In the Console in Soffid IAM before 3.5.39, necessary checks were not applied to some Java objects. A malicious agent could possibly execute arbitrary code in the Sync Server and compromise security.