CVE-2024-23600

—

CVSS 3.1

2.7 low

EPSS

<1%p50

Published

Aug 1, 2024 (Aug 1, 2024)

Modified

Jun 17, 2026

Description

Improper Input Validation of query search results for private field data in PingIDM (Query Filter module) allows for a potentially efficient brute forcing approach leading to information disclosure.

Weakness: CWE-20
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news0 stories

No ingested article mentions this CVE yet.