Executive Summary

This vulnerability affects all versions of IdentityIQ and allows an authenticated user who is either the requestor or assignee of a work item to edit the definition of a role. This can be done without having the necessary assigned capability that normally permits role editing.

Useful 0 Not Useful 0

Impact Analysis

The vulnerability can lead to unauthorized modification of role definitions by users who should not have such permissions. This can result in privilege escalation, unauthorized access, and potentially compromise the confidentiality, integrity, and availability of systems and data.

Useful 0 Not Useful 0

Compliance Impact

The vulnerability allows unauthorized editing of role definitions by authenticated users without the required capabilities, which can lead to unauthorized access and privilege escalation.

Such unauthorized role modifications can undermine access controls and segregation of duties, potentially resulting in non-compliance with common standards and regulations like GDPR and HIPAA that require strict access management and protection of sensitive data.

Useful 0 Not Useful 0

Executive Summary

CVE-2026-5712 is an Incorrect Authorization Vulnerability in SailPoint IdentityIQ Role Editor. It allows an authenticated user who is either the requestor or assignee of a work item to edit the definition of a role without having the necessary capability or permission to do so.

This means that users can modify role definitions even if they are not authorized to perform role editing, potentially bypassing security controls.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can lead to unauthorized modifications of role definitions within the IdentityIQ system.

• Users without proper role editing capabilities can change roles, potentially granting excessive or inappropriate access.
• Such unauthorized changes can compromise the security of the system by allowing privilege escalation or access to sensitive resources.
• The vulnerability has a high severity score (CVSS 8.0), indicating significant risk to confidentiality, integrity, and availability.

Useful 0 Not Useful 0

Mitigation Strategies

To mitigate CVE-2026-5712, you should apply the patches released by SailPoint that address this incorrect authorization vulnerability.

• Install patch IIQSR-972 for your specific IdentityIQ version.
• Ensure your IdentityIQ version is updated to at least 8.5p2, 8.4p4, or 8.3p5, depending on your current version.

These patches fix the issue allowing authenticated users who are requestors or assignees of a work item to edit role definitions without proper authorization.

Useful 0 Not Useful 0

Mitigation Strategies

To mitigate CVE-2026-5712, you should apply the patches released by SailPoint that address this incorrect authorization vulnerability.

• Install patch IIQSR-972 for your specific version of IdentityIQ.
• Ensure your IdentityIQ version is updated to at least 8.5p2, 8.4p4, or 8.3p5 depending on your current version.

These patches fix the issue that allows authenticated users who are requestors or assignees of a work item to edit role definitions without the required capability.

Useful 0 Not Useful 0