CVE-2023-39219

published 2023-10-25

CVE-2023-39219: PingFederate Administrative Console dependency contains a weakness where console becomes unresponsive with crafted Java class loading enumeration requests

Priority P3 37 high 7.5 CVSS 3.1

AV N AC L PR N UI N S U C N I N A H

PingFederate Administrative Console dependency contains a weakness where console becomes unresponsive with crafted Java class loading enumeration requests

Affected

8 ranges

Vendor	Product	Version range	Fixed in
ping_identity	pingfederate	10.3.0 – 10.3.12	—
ping_identity	pingfederate	11.1.0 – 11.1.7	—
ping_identity	pingfederate	11.2.0 – 11.2.6	—
ping_identity	pingfederate	11.3 – 11.3.0	—
pingidentity	pingfederate	—	—
pingidentity	pingfederate	10.3.0 – 10.3.12	—
pingidentity	pingfederate	11.1.0 – 11.1.7	—
pingidentity	pingfederate	11.2.0 – 11.2.6	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-400