CVE-2014-8489

Mô tả

Tham khảo

• packetstormsecurity.com/files/129454/PingFederate-6.10.1-SP-Endpoints-Open-Redirect.html
• seclists.org/fulldisclosure/2014/Dec/35
• tetraph.com/security/cves/cve-2014-8489-ping-identity-corporation-pingfederate-6-10-1-sp-endpoints-dest-redirect-privilege-escalation-security-vulnerability

Lỗ hổng khác của pingfederate

• CVE-2024-22477TRUNG BÌNH 4.3A cross-site scripting vulnerability exists in the admin console OIDC Policy Management Editor. The impact is contained to admin console use…
• CVE-2024-22377TRUNG BÌNH 5.3The deploy directory in PingFederate runtime nodes is reachable to unauthorized users.
• CVE-2023-40545NGHIÊM TRỌNG 9.8Authentication bypass when an OAuth2 Client is using client_secret_jwt as its authentication method on affected 11.3 versions via specially …
• CVE-2023-39219CAO 7.5PingFederate Administrative Console dependency contains a weakness where console becomes unresponsive with crafted Java class loading enumer…
• CVE-2023-37283NGHIÊM TRỌNG 9.8Under a very specific and highly unrecommended configuration, authentication bypass is possible in the PingFederate Identifier First Adapter…