CVE-2024-22377CWE-22

PingFederate Runtime Node Path Traversal

Medium · published July 9, 2024

CVSS v3.1

5.3

EPSS

Percentile

37.1

In the wild

Unconfirmed

What it is

The deploy directory in PingFederate runtime nodes is reachable to unauthorized users.

The record

Technical detail

CVSS v3.1: 5.3 · MEDIUM
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0: Not supplied
EPSS: 0.00439 · 37.1th percentile
Weakness: CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published: 2024-07-09T23:03Z

EPSS history

Timeline