critical9.8
CVE-2024-39669
In the Console in Soffid IAM before 3.5.39, necessary checks were not applied to some Java objects.
Impact
In the Console in Soffid IAM before 3.5.39, necessary checks were not applied to some Java objects. A malicious agent could possibly execute arbitrary code in the Sync Server and compromise security.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Soffid | Soffid IAM | before 3.5.39 |
Versions were read from the advisory text. No structured product data has been published for this record yet.