CVE Vulnerabilities

CVE-2023-34085

Published: Oct 25, 2023 | Modified: Oct 31, 2023
CVSS 3.x
4.3
MEDIUM
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

When an AWS DynamoDB table is used for user attribute storage, it is possible to retrieve the attributes of another user using a maliciously crafted request

Affected Software

Name Vendor Start Version End Version
Pingfederate Pingidentity * 11.3.0 (including)

References