CVE-2024-23316

{"id": "CVE-2024-23316", "metrics": {}, "published": "2024-05-31T19:15:08.723", "references": [{"url": "https://docs.pingidentity.com/r/en-us/pingaccess-80/pa_801_rn", "source": "responsible-disclosure@pingidentity.com"}, {"url": "https://support.pingidentity.com/s/article/SECADV045-PA-HTTP-Smuggling", "source": "responsible-disclosure@pingidentity.com"}, {"url": "https://www.pingidentity.com/en/resources/downloads/pingaccess.html", "source": "responsible-disclosure@pingidentity.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "responsible-disclosure@pingidentity.com", "description": [{"lang": "en", "value": "CWE-444"}]}], "descriptions": [{"lang": "en", "value": "HTTP request desynchronization in Ping Identity PingAccess, all versions prior to 8.0.1 affected allows an attacker to send specially crafted http header requests to create a request smuggling condition for proxied requests."}, {"lang": "es", "value": "La desincronizaci\u00f3n de solicitudes HTTP en Ping Identity PingAccess, todas las versiones anteriores a 8.0.1 afectadas, permite a un atacante enviar solicitudes de encabezado http especialmente manipuladas para crear una condici\u00f3n de contrabando de solicitudes para solicitudes proxy."}], "lastModified": "2024-06-03T14:46:24.250", "sourceIdentifier": "responsible-disclosure@pingidentity.com"}