VULNERABILITY INTELLIGENCE
CVE-2024-23316
EPSS probability0.55%
CISA KEVNot currently listed
Published2024-05-31
Last modified2026-06-17
Description
HTTP request desynchronization in Ping Identity PingAccess, all versions prior to 8.0.1 affected allows an attacker to send specially crafted http header requests to create a request smuggling condition for proxied requests.
Weakness classification
- responsible-disclosure@pingidentity.com: CWE-444