← CVE Intelligence

CVE-2022-40724

Cross-Site Request Forgery on PingFederate Local Identity Profiles Endpoint. PUBLISHED

Description (CNA)

The PingFederate Local Identity Profiles '/pf/idprofile.ping' endpoint is vulnerable to Cross-Site Request Forgery (CSRF) through crafted GET requests.

Affected (CNA)

Vendor / productVersions
Ping Identity / PingFederateaffected 10.3.0 before 10.3.0*; affected 10.3.11 through 10.3.11; affected 11.0.0 before 11.0.0*; affected 11.0.6 through 11.0.6; affected 11.1.0 before 11.1.0*; affected 11.1.5 through 11.1.5; affected 11.2.0 before 11.2.0*; affected 11.2.2 through 11.2.2

CWE

CWE-352

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.