
A significant security vulnerability has been identified in SailPoint’s IdentityIQ IAM software, tagged as CVE-2024-10905. This flaw, which has been assigned a maximum CVSS severity score of 10.0, allows unauthorized access to sensitive content within the application directory by exploiting improper handling of virtual resource file names (CWE-66). The affected versions include IdentityIQ 8.4 and its earlier patch levels prior