Critical Zero-Day Flaw in SailPoint IdentityIQ Enables Full System Access

Critical security vulnerability (CVE-2024-10905) discovered in SailPoint IdentityIQ IAM software allows unauthorized access to protected content through HTTP, affecting multiple versions prior to recent patches. The flaw carries maximum CVSS score of 10.0 and stems from improper file name ...