CVE-2024-21832: PingFederate REST API Data Store Injection
Published Jul 9, 2024
·Updated
A potential JSON injection attack vector exists in PingFederate REST API data stores using the POST method and a JSON request body.
Affected Software
1 affected component
PingFederate REST API
Event History
Jul 9, 2024
CVE Published
via MITRE·11:04 PM
Data Sourced
via MITRE·11:04 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·11:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-21832?
CVE-2024-21832 has been classified as a moderate severity vulnerability.
2
How do I fix CVE-2024-21832?
To fix CVE-2024-21832, ensure that input validation and sanitization measures are implemented for JSON request bodies.
3
What systems are affected by CVE-2024-21832?
CVE-2024-21832 affects PingFederate REST API when using the POST method with JSON request bodies.
4
Can CVE-2024-21832 lead to data compromise?
Yes, a successful exploitation of CVE-2024-21832 can lead to unauthorized access to sensitive data.
5
Is there a workaround for CVE-2024-21832?
A potential workaround for CVE-2024-21832 is to limit API access to trusted networks or authenticated users until a patch is available.