Vulnerabilities > CVE-2023-34085 - Unspecified vulnerability in Pingidentity Pingfederate

CVSS 4.3 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

LOW

Integrity impact

NONE

Availability impact

NONE

network

low complexity

pingidentity

NVD

Published: 2023-10-25

Updated: 2023-10-31

Summary

When an AWS DynamoDB table is used for user attribute storage, it is possible to retrieve the attributes of another user using a maliciously crafted request

Vulnerable Configurations

Part	Description	Count
Application	Pingidentity Pingidentity Pingfederate - Pingidentity Pingfederate 6.10.1 Pingidentity Pingfederate 9.3.0 Pingidentity Pingfederate 9.3.3 Pingidentity Pingfederate 10.0.0 Pingidentity Pingfederate 10.0.12 Pingidentity Pingfederate 10.1.0 Pingidentity Pingfederate 10.1.9 Pingidentity Pingfederate 10.2.0 Pingidentity Pingfederate 10.2.7 Pingidentity Pingfederate 10.3.0 Pingidentity Pingfederate 10.3.4 Pingidentity Pingfederate 10.3.11 Pingidentity Pingfederate 11.0.0 Pingidentity Pingfederate 11.0.1 Pingidentity Pingfederate 11.0.2 Pingidentity Pingfederate 11.0.3 Pingidentity Pingfederate 11.0.4 Pingidentity Pingfederate 11.0.5 Pingidentity Pingfederate 11.0.6 Pingidentity Pingfederate 11.0.7 Pingidentity Pingfederate 11.0.8 Pingidentity Pingfederate 11.1.0 Pingidentity Pingfederate 11.1.1 Pingidentity Pingfederate 11.1.2 Pingidentity Pingfederate 11.1.3 Pingidentity Pingfederate 11.1.4 Pingidentity Pingfederate 11.1.5 Pingidentity Pingfederate 11.1.6 Pingidentity Pingfederate 11.1.7 Pingidentity Pingfederate 11.1.8 Pingidentity Pingfederate 11.2.0 Pingidentity Pingfederate 11.2.1 Pingidentity Pingfederate 11.2.2 Pingidentity Pingfederate 11.2.3 Pingidentity Pingfederate 11.2.4 Pingidentity Pingfederate 11.2.5 Pingidentity Pingfederate 11.2.6 Pingidentity Pingfederate 11.2.7	40

Summary

Vulnerable Configurations

References