← Database

CVE-2024-56404

CRITICAL CVSS: 9.9 Published: 2025-01-24 Modified: 2026-06-17

Description

In One Identity Identity Manager 9.x before 9.3, an insecure direct object reference (IDOR) vulnerability allows privilege escalation. Only On-Premise installations are affected.

Affected Platforms

Unknown

Weakness Type

CWE-302

References