Skip to content
CVE PROGRAM SOURCE RECORD2.6 Low

CVE-2023-34085

User Attribute Disclosure via DynamoDB Data Stores

Description

When an AWS DynamoDB table is used for user attribute storage, it is possible to retrieve the attributes of another user using a maliciously crafted request

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Ping Identity PingFederate

Default version status: unaffected

  • 11.3 to ≤ 11.3.0affected

References