CVE-2014-8489

概要

参考情報

• packetstormsecurity.com/files/129454/PingFederate-6.10.1-SP-Endpoints-Open-Redirect.html
• seclists.org/fulldisclosure/2014/Dec/35
• tetraph.com/security/cves/cve-2014-8489-ping-identity-corporation-pingfederate-6-10-1-sp-endpoints-dest-redirect-privilege-escalation-security-vulnerability

pingfederate のその他の脆弱性

• CVE-2024-22477中 4.3A cross-site scripting vulnerability exists in the admin console OIDC Policy Management Editor. The impact is contained to admin console use…
• CVE-2024-22377中 5.3The deploy directory in PingFederate runtime nodes is reachable to unauthorized users.
• CVE-2023-40545緊急 9.8Authentication bypass when an OAuth2 Client is using client_secret_jwt as its authentication method on affected 11.3 versions via specially …
• CVE-2023-39219高 7.5PingFederate Administrative Console dependency contains a weakness where console becomes unresponsive with crafted Java class loading enumer…
• CVE-2023-37283緊急 9.8Under a very specific and highly unrecommended configuration, authentication bypass is possible in the PingFederate Identifier First Adapter…