What’s Vulnerable › Vulnerabilities

CVE-2024-1714: Access Request for Entitlement Values with Leading/Trailing Whitespace

• Severity: high (CVSS 7.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-02-21 · updated 2026-06-17
• Weakness: CWE-20

Description

An issue exists in all supported versions of IdentityIQ Lifecycle Manager that can result if an entitlement with a value containing leading or trailing whitespace is requested by an authenticated user in an access request.

Affected products

• SailPoint IdentityIQ: 8.1, 8.1-patch1, 8.1-patch2, 8.1-patch3, 8.1-patch4, 8.1-patch5 (+8)

References

• https://www.sailpoint.com/security-advisories/sailpoint-identityiq-access-request-for-entitlement-values-with-leading-trailing-whitespace-cve-2024-1714/
• https://www.sailpoint.com/security-advisories/sailpoint-identityiq-access-request-for-entitlement-values-with-leading-trailing-whitespace-cve-2024-1714/

Get alerted when CVE-2024-1714 or the next vulnerability affects your stack