Search criteria

3 vulnerabilities found for pingaccess by pingidentity

FKIE_CVE-2021-31923

Vulnerability from fkie_nvd - Published: 2021-09-24 03:15 - Updated: 2024-11-21 06:06
Severity ?
5.3 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Summary
Ping Identity PingAccess before 5.3.3 allows HTTP request smuggling via header manipulation.
References
responsible-disclosure@pingidentity.comhttps://docs.pingidentity.com/bundle/pingaccess-53/page/wco1629833104567.html
af854a3a-2127-422b-91ae-364da2661108https://docs.pingidentity.com/bundle/pingaccess-53/page/wco1629833104567.html
Impacted products
Vendor Product Version
pingidentity pingaccess *
To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:pingidentity:pingaccess:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "1A740C41-9799-48C0-ABB2-F0315FA37007",
              "versionEndExcluding": "5.3.3",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Ping Identity PingAccess before 5.3.3 allows HTTP request smuggling via header manipulation."
    },
    {
      "lang": "es",
      "value": "Ping Identity PingAccess versiones anteriores a 5.3.3, permite un contrabando de peticiones HTTP por medio de la manipulaci\u00f3n de encabezados."
    }
  ],
  "id": "CVE-2021-31923",
  "lastModified": "2024-11-21T06:06:31.213",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "NONE",
          "baseScore": 5.0,
          "confidentialityImpact": "NONE",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "NONE",
          "baseScore": 5.3,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "NONE",
          "integrityImpact": "LOW",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
          "version": "3.1"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 1.4,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2021-09-24T03:15:06.497",
  "references": [
    {
      "source": "responsible-disclosure@pingidentity.com",
      "url": "https://docs.pingidentity.com/bundle/pingaccess-53/page/wco1629833104567.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://docs.pingidentity.com/bundle/pingaccess-53/page/wco1629833104567.html"
    }
  ],
  "sourceIdentifier": "responsible-disclosure@pingidentity.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-444"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

CVE-2021-31923 (GCVE-0-2021-31923)

Vulnerability from cvelistv5 – Published: 2021-09-24 02:30 – Updated: 2024-08-03 23:10
VLAI?
Summary
Ping Identity PingAccess before 5.3.3 allows HTTP request smuggling via header manipulation.
Severity ?
No CVSS data available.
CWE
  • HTTP Request Smuggling
Assigner
References
Impacted products
Vendor Product Version
Ping Identity PingAccess Affected: 5.3
Create a notification for this product.
Credits
Ping Identity credits Portswigger Research for the discovery of this vulnerability. Ping Identity credits MUFG Union Bank for their responsible disclosure.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T23:10:31.392Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://docs.pingidentity.com/bundle/pingaccess-53/page/wco1629833104567.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "PingAccess",
          "vendor": "Ping Identity",
          "versions": [
            {
              "status": "affected",
              "version": "5.3"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Ping Identity credits Portswigger Research for the discovery of this vulnerability."
        },
        {
          "lang": "en",
          "value": "Ping Identity credits MUFG Union Bank for their responsible disclosure."
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Ping Identity PingAccess before 5.3.3 allows HTTP request smuggling via header manipulation."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "HTTP Request Smuggling",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-10-18T14:30:08",
        "orgId": "5998a2e9-ae88-42cd-b6e0-7564fd979f9e",
        "shortName": "Ping Identity"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://docs.pingidentity.com/bundle/pingaccess-53/page/wco1629833104567.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "responsible-disclosure@pingidentity.com",
          "ID": "CVE-2021-31923",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "PingAccess",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "5.3"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Ping Identity"
              }
            ]
          }
        },
        "credit": [
          {
            "lang": "eng",
            "value": "Ping Identity credits Portswigger Research for the discovery of this vulnerability."
          },
          {
            "lang": "eng",
            "value": "Ping Identity credits MUFG Union Bank for their responsible disclosure."
          }
        ],
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Ping Identity PingAccess before 5.3.3 allows HTTP request smuggling via header manipulation."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "HTTP Request Smuggling"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://docs.pingidentity.com/bundle/pingaccess-53/page/wco1629833104567.html",
              "refsource": "CONFIRM",
              "url": "https://docs.pingidentity.com/bundle/pingaccess-53/page/wco1629833104567.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "5998a2e9-ae88-42cd-b6e0-7564fd979f9e",
    "assignerShortName": "Ping Identity",
    "cveId": "CVE-2021-31923",
    "datePublished": "2021-09-24T02:30:11",
    "dateReserved": "2021-04-30T00:00:00",
    "dateUpdated": "2024-08-03T23:10:31.392Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-31923 (GCVE-0-2021-31923)

Vulnerability from nvd – Published: 2021-09-24 02:30 – Updated: 2024-08-03 23:10
VLAI?
Summary
Ping Identity PingAccess before 5.3.3 allows HTTP request smuggling via header manipulation.
Severity ?
No CVSS data available.
CWE
  • HTTP Request Smuggling
Assigner
References
Impacted products
Vendor Product Version
Ping Identity PingAccess Affected: 5.3
Create a notification for this product.
Credits
Ping Identity credits Portswigger Research for the discovery of this vulnerability. Ping Identity credits MUFG Union Bank for their responsible disclosure.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T23:10:31.392Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://docs.pingidentity.com/bundle/pingaccess-53/page/wco1629833104567.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "PingAccess",
          "vendor": "Ping Identity",
          "versions": [
            {
              "status": "affected",
              "version": "5.3"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Ping Identity credits Portswigger Research for the discovery of this vulnerability."
        },
        {
          "lang": "en",
          "value": "Ping Identity credits MUFG Union Bank for their responsible disclosure."
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Ping Identity PingAccess before 5.3.3 allows HTTP request smuggling via header manipulation."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "HTTP Request Smuggling",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-10-18T14:30:08",
        "orgId": "5998a2e9-ae88-42cd-b6e0-7564fd979f9e",
        "shortName": "Ping Identity"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://docs.pingidentity.com/bundle/pingaccess-53/page/wco1629833104567.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "responsible-disclosure@pingidentity.com",
          "ID": "CVE-2021-31923",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "PingAccess",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "5.3"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Ping Identity"
              }
            ]
          }
        },
        "credit": [
          {
            "lang": "eng",
            "value": "Ping Identity credits Portswigger Research for the discovery of this vulnerability."
          },
          {
            "lang": "eng",
            "value": "Ping Identity credits MUFG Union Bank for their responsible disclosure."
          }
        ],
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Ping Identity PingAccess before 5.3.3 allows HTTP request smuggling via header manipulation."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "HTTP Request Smuggling"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://docs.pingidentity.com/bundle/pingaccess-53/page/wco1629833104567.html",
              "refsource": "CONFIRM",
              "url": "https://docs.pingidentity.com/bundle/pingaccess-53/page/wco1629833104567.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "5998a2e9-ae88-42cd-b6e0-7564fd979f9e",
    "assignerShortName": "Ping Identity",
    "cveId": "CVE-2021-31923",
    "datePublished": "2021-09-24T02:30:11",
    "dateReserved": "2021-04-30T00:00:00",
    "dateUpdated": "2024-08-03T23:10:31.392Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}