How severe is CVE-2024-10905?

This vulnerability has a severity rating of CRITICAL with a CVSS score of 10 out of 10.

What type of vulnerability is CVE-2024-10905?

This is classified as CWE-66, which is a common weakness in software security.

CVE-2024-10905

CRITICAL Year: 2024

CVSS v3 Score

10.0

Critical

Weakness Type

CWE-66

View all →

Vulnerability Description

IdentityIQ 8.4 and all 8.4 patch levels prior to 8.4p2, IdentityIQ 8.3 and all 8.3 patch levels prior to 8.3p5, IdentityIQ 8.2 and all 8.2 patch levels prior to 8.2p8, and all prior versions allow HTTP/HTTPS access to static content in the IdentityIQ application directory that should be protected.