← All advisories

Medium severity5.3NVD Advisory· Published Jul 9, 2024· Updated Jun 17, 2026

CVE-2024-22377

CVE-2024-22377

Description

The deploy directory in PingFederate runtime nodes is reachable to unauthorized users.

Affected products

4

Pingidentity/Pingfederate4 versions
cpe:2.3:a:pingidentity:pingfederate:*:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:pingidentity:pingfederate:*:*:*:*:*:*:*:*range: >=10.3.0,<=10.3.13
- cpe:2.3:a:pingidentity:pingfederate:12.0.0:*:*:*:*:*:*:*
- (no CPE)
- (no CPE)range: 11.0.0

Patches

Vulnerability mechanics

References

1

docs.pingidentity.com/r/en-us/pingfederate-120/lwu1707324350083nvdBroken Link

News mentions

0

No linked articles in our index yet.