PT-2024-19804
CVE-2024-23316
·
تاريخ النشر
2024-05-31
·
تاريخ التحديث
2024-06-03
الوصف من
CVSS 4.0
8.8
عاليةالمقاييسAV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:P/AU:Y/R:A/V:X/RE:M/U:Amber
Name of the Vulnerable Software and Affected Versions
Ping Identity PingAccess versions prior to 8.0.1
Description
The issue allows an attacker to send specially crafted HTTP header requests to create a request smuggling condition for proxied requests. This is achieved through HTTP request desynchronization in Ping Identity PingAccess.
Recommendations
For versions prior to 8.0.1, update to version 8.0.1 or later to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾