high7.5
CVE-2021-41770
Ping Identity PingFederate before 10.3.1 mishandles pre-parsing validation, leading to an XXE attack that can achieve XML file disclosure.
Impact
Ping Identity PingFederate before 10.3.1 mishandles pre-parsing validation, leading to an XXE attack that can achieve XML file disclosure.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pingidentity | Pingfederate | before 10.3.1 |
Weakness classification
References
- NVD record
- CVE.org record
- https://docs.pingidentity.com/bundle/pingfederate-103/page/ruz1628492711606.html
- https://www.pingidentity.com/en/resources/downloads/pingfederate.html
- https://docs.pingidentity.com/bundle/pingfederate-103/page/ruz1628492711606.html
- https://www.pingidentity.com/en/resources/downloads/pingfederate.html