CVE-2026-20746 PingDirectory copying of virtual attributes leads to memory exhaustion

Virtual attribute handling in Ping Identity PingDirectory in affected versions allows only authorized users to exhaust java memory heap when recent login history is enabled and copying virtual attributes that reference ds-privilege-name values...

CVE-2026-20746 PingDirectory copying of virtual attributes leads to memory exhaustion

Virtual attribute handling in Ping Identity PingDirectory in affected versions allows only authorized users to exhaust java memory heap when recent login history is enabled and copying virtual attributes that reference ds-privilege-name values...

CVE-2026-20746

PingDirectory (Ping Identity) is affected; copying virtual attributes that reference ds-privilege-name values can exhaust the Java heap when recent login history is enabled. The root cause is in virtual attribute handling within affected PingDirectory versions, enabling only authorized users to t...

CVE-2026-20746: Missing Release of Memory after Effective Lifetime

Virtual attribute handling in Ping Identity PingDirectory in affected versions allows only authorized users to exhaust java memory heap when recent login history is enabled and copying virtual attributes that reference ds-privilege-name values...

PT-2026-48819

Name of the Vulnerable Software and Affected Versions Ping Identity PingDirectory affected versions not specified Description Improper virtual attribute handling allows authorized users to exhaust the Java memory heap. This occurs when recent login history is enabled and virtual attributes that...

PingDirectory security vulnerability

Ping Identity PingDirectory is a fast, scalable directory for storing identity and rich profile data from Ping Identity. A security vulnerability exists in PingDirectory. An attacker can exploit the vulnerability to elevate privileges...