Files
vuln-nvd/data/2024/CVE-2024-3318.json
T

2 lines
2.1 KiB
JSON

{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"Identity Security Cloud","vendor":"SailPoint","versions":[{"status":"affected","version":"n/a"}]}],"source":"psirt@sailpoint.com"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A file path traversal vulnerability was identified in the DelimitedFileConnector Cloud Connector that allowed an authenticated administrator to set arbitrary connector attributes, including the “file“ attribute, which in turn allowed the user to access files uploaded for other sources."},{"lang":"es","value":"Se identificó una vulnerabilidad de path traversal de archivo en el conector en la nube DelimitedFileConnector que permitía a un administrador autenticado establecer atributos de conector arbitrarios, incluido el atributo “archivo”, lo que a su vez permitía al usuario acceder a archivos cargados para otras fuentes."}],"id":"CVE-2024-3318","lastModified":"2026-06-17T07:43:46.553","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":4.2,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":0.5,"impactScore":3.6,"source":"psirt@sailpoint.com","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2024-3318","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2024-07-19T16:30:56.909490Z","version":"2.0.3"}}]},"published":"2024-05-15T16:15:10.963","references":[{"source":"psirt@sailpoint.com","url":"https://www.sailpoint.com/security-advisories/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://www.sailpoint.com/security-advisories/"}],"sourceIdentifier":"psirt@sailpoint.com","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-22"}],"source":"psirt@sailpoint.com","type":"Secondary"}]}