← All advisories

Unrated severityNVD Advisory· Published Jul 9, 2024· Updated Aug 1, 2024

PingFederate Runtime Node Path Traversal

CVE-2024-22377

Description

The deploy directory in PingFederate runtime nodes is reachable to unauthorized users.

Affected products

2

PingFederate/PingFederatellm-create
Pingidentity/Pingfederatecpe-rescue
Range: 11.0.0

Patches

Vulnerability mechanics

References

1

docs.pingidentity.com/r/en-us/pingfederate-120/lwu1707324350083mitre

News mentions

0

No linked articles in our index yet.