← CVE Intelligence

CVE-2024-22377

PingFederate Runtime Node Path Traversal PUBLISHED

Description (CNA)

The deploy directory in PingFederate runtime nodes is reachable to unauthorized users.

Affected (CNA)

Vendor / productVersions
Ping Identity / PingFederateaffected 11.0.0 through 11.0.9; affected 11.1.0 through 11.1.9; affected 11.2.0 through 11.2.8; affected 11.3.0 through 11.3.4; affected 12.0.0; affected 10.3.0 through 10.3.13

CWE

CWE-22

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.