Skip to content
OpenAdvisories
Medium · 5.1 CVE-2024-25566 EUVD-2024-22894GHSA-748f-44g2-h43m

Open Redirect in PingAM

Published Oct 29, 2024 · Updated Oct 29, 2024 · Assigned by Ping Identity

Description

An Open-Redirect vulnerability exists in PingAM where well-crafted requests may cause improper validation of redirect URLs. This could allow an attacker to redirect end-users to malicious sites under their control, simplifying phishing attacks

Affected products

VendorProductAffectedFixed
Ping Identity PingAM 7.5.0, 7.4.0 – ≤ 7.4.1, 7.3.0 – ≤ 7.3.1, 7.2.0 – ≤ 7.2.2, 7.1.0 – ≤ 7.1.4, ≤ 7.0.2 —

References