high8.8
CVE-2024-23316
HTTP request desynchronization in Ping Identity PingAccess, all versions prior to 8.0.1 affected allows an attacker to send specially crafted http header reque…
Impact
HTTP request desynchronization in Ping Identity PingAccess, all versions prior to 8.0.1 affected allows an attacker to send specially crafted http header requests to create a request smuggling condition for proxied requests.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ping Identity | Ping Identity PingAccess, All | before 8.0.1 |
Versions were read from the advisory text. No structured product data has been published for this record yet.
Weakness classification
References
- NVD record
- CVE.org record
- https://docs.pingidentity.com/r/en-us/pingaccess-80/pa_801_rn
- https://support.pingidentity.com/s/article/SECADV045-PA-HTTP-Smuggling
- https://www.pingidentity.com/en/resources/downloads/pingaccess.html
- https://docs.pingidentity.com/r/en-us/pingaccess-80/pa_801_rn
- https://support.pingidentity.com/s/article/SECADV045-PA-HTTP-Smuggling
- https://www.pingidentity.com/en/resources/downloads/pingaccess.html