CVE-2024-3317

Summary

CVE-2024-3317 is a newly discovered vulnerability affecting the Identity Security Cloud (ISC) message server API. The issue stems from a lack of adequate access control, enabling authenticated users to gain unauthorized access to job processing metadata for other tenants. This involves the exposure of opaque messageIDs, work queue depth, and counts. The vulnerability poses a potential risk for data leakage and unintended access to sensitive information. ISC is advised to address this issue promptly by implementing proper access control measures to mitigate any potential threats.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.