Lucene search
Ping IdentityVULNRICHMENT:CVE-2024-23316HistoryMay 31, 2024 - 7:08 p.m.
CVE-2024-23316 PingAccess HTTP Request Desynchronization Weakness
2024-05-3119:08:35
CWE-444
Ping Identity
github.com
1
ping identity
request smuggling
http
vulnerability
8.0.1
attack
8.8 High
CVSS4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
PASSIVE
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/SC:H/VI:H/SI:H/VA:N/SA:N/S:P/AU:Y/U:Amber/R:A/RE:M
6.8 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
15.6%
HTTP request desynchronization in Ping Identity PingAccess, all versions prior to 8.0.1 affected allows an attacker to send specially crafted http header requests to create a request smuggling condition for proxied requests.
CNA Affected
[
{
"defaultStatus": "affected",
"product": "PingAccess",
"vendor": "Ping Identity",
"versions": [
{
"lessThan": "8.0.1",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
]Related
cve
cve
CVE-2024-23316
2024-05-31 19:15:08
cvelist
cvelist
CVE-2024-23316 PingAccess HTTP Request Desynchronization Weakness
2024-05-31 19:08:35
nvd
nvd
CVE-2024-23316
2024-05-31 19:15:08
8.8 High
CVSS4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
PASSIVE
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/SC:H/VI:H/SI:H/VA:N/SA:N/S:P/AU:Y/U:Amber/R:A/RE:M
6.8 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
15.6%
Related for VULNRICHMENT:CVE-2024-23316