Lucene search
Ping IdentityCVELIST:CVE-2024-23316HistoryMay 31, 2024 - 7:08 p.m.
CVE-2024-23316 PingAccess HTTP Request Desynchronization Weakness
2024-05-3119:08:35
CWE-444
Ping Identity
www.cve.org
2
pingaccess
http request
desynchronization
weakness
cve-2024-23316
ping identity
request smuggling
8.8 High
CVSS4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
PASSIVE
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/SC:H/VI:H/SI:H/VA:N/SA:N/S:P/AU:Y/U:Amber/R:A/RE:M
6.4 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
15.6%
HTTP request desynchronization in Ping Identity PingAccess, all versions prior to 8.0.1 affected allows an attacker to send specially crafted http header requests to create a request smuggling condition for proxied requests.
CNA Affected
[
{
"defaultStatus": "affected",
"product": "PingAccess",
"vendor": "Ping Identity",
"versions": [
{
"lessThan": "8.0.1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
]Related
vulnrichment
vulnrichment
CVE-2024-23316 PingAccess HTTP Request Desynchronization Weakness
2024-05-31 19:08:35
cve
cve
CVE-2024-23316
2024-05-31 19:15:08
nvd
nvd
CVE-2024-23316
2024-05-31 19:15:08
8.8 High
CVSS4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
PASSIVE
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/SC:H/VI:H/SI:H/VA:N/SA:N/S:P/AU:Y/U:Amber/R:A/RE:M
6.4 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
15.6%
Related for CVELIST:CVE-2024-23316