One Identity Identity Manager Privilege Escalation Vulnerability

A privilege escalation vulnerability due to insecure direct object reference (IDOR) has been identified in One Identity Identity Manager versions 9.0.x prior to 9.2.1. This vulnerability affects only On-Premise installations, allowing unauthorized users to gain elevated privileges.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing users to gain elevated rights or access within the application.

Remediation

One Identity has released hotfixes for all impacted versions: 9.0.x LTS CU3, 9.1x, and 9.2.x. Instructions for applying these hotfixes can be found in the One Identity Knowledge Base article 4378024.