CVE-2024-21832

{"id": "CVE-2024-21832", "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "responsible-disclosure@pingidentity.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 3.5, "attackVector": "NETWORK", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 1.8}]}, "published": "2024-07-09T23:15:10.397", "references": [{"url": "https://docs.pingidentity.com/r/en-us/pingfederate-120/lwu1707324350083", "source": "responsible-disclosure@pingidentity.com"}, {"url": "https://docs.pingidentity.com/r/en-us/pingfederate-120/lwu1707324350083", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "responsible-disclosure@pingidentity.com", "description": [{"lang": "en", "value": "CWE-94"}]}], "descriptions": [{"lang": "en", "value": "A potential JSON injection attack vector exists in PingFederate REST API data stores using the POST method and a JSON request body."}, {"lang": "es", "value": "Existe un posible vector de ataque de inyecci\u00f3n JSON en los almacenes de datos de la API REST de PingFederate utilizando el m\u00e9todo POST y un cuerpo de solicitud JSON."}], "lastModified": "2024-11-21T08:55:05.190", "sourceIdentifier": "responsible-disclosure@pingidentity.com"}