Skip to content
OpenAdvisories
Medium · 5.3 CVE-2024-22377 EUVD-2024-19934GHSA-3wxw-jcf9-xgm3

PingFederate Runtime Node Path Traversal

Published Jul 9, 2024 · Updated Aug 1, 2024 · Assigned by Ping Identity

Description

The deploy directory in PingFederate runtime nodes is reachable to unauthorized users.

Affected products

VendorProductAffectedFixed
Ping Identity PingFederate 11.0.0 – ≤ 11.0.9, 11.1.0 – ≤ 11.1.9, 11.2.0 – ≤ 11.2.8, 11.3.0 – ≤ 11.3.4, 12.0.0, 10.3.0 – ≤ 10.3.13 —

References