Description (CNA)
Improper Input Validation of query search results for private field data in PingIDM (Query Filter module) allows for a potentially efficient brute forcing approach leading to information disclosure.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Ping Identity / PingIDM | affected 7.0.0 through 7.5.0 |
CWE
CWE-20
References
- https://backstage.forgerock.com/knowledge/kb/article/a95212747
- https://backstage.forgerock.com/docs/idcloud/latest/release-notes/regular-channel-changelog.html#changed_functionality
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.