critical9.8
CVE-2020-10654
Ping Identity PingID SSH before 4.0.14 contains a heap buffer overflow in PingID-enrolled servers.
Impact
Ping Identity PingID SSH before 4.0.14 contains a heap buffer overflow in PingID-enrolled servers. This condition can be potentially exploited into a Remote Code Execution vector on the authenticating endpoint.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pingidentity | Pingid Ssh Integration | before 4.0.14 |
Weakness classification
References
- NVD record
- CVE.org record
- https://docs.pingidentity.com/bundle/pingid/page/hmc1587998527490.html
- https://docs.pingidentity.com/bundle/pingid/page/okt1564020467088.html
- https://www.pingidentity.com/
- https://www.pingidentity.com/en/cloud/pingid.html
- https://docs.pingidentity.com/bundle/pingid/page/hmc1587998527490.html
- https://docs.pingidentity.com/bundle/pingid/page/okt1564020467088.html
- https://www.pingidentity.com/
- https://www.pingidentity.com/en/cloud/pingid.html