PingFederate Server

PingFederate 11.2.9 (April 2024)

Rest datastore security vulnerability

Security

Fixed a JSON injection vulnerability in REST datastores described in security advisory SECADV044.

Runtime nodes security vulnerability

Security

Fixed a path traversal vulnerability in Runtime nodes described in security advisory SECADV044.

OpenID Connect policy management editor security vulnerability

Security

Fixed a Cross-Site Scripting vulnerability in the OpenID Connect Policy Management Editor described in security advisory SECADV044.

Slow log consumption affects performance

Fixed

Fixed a defect that caused performance issues for PingFederate when third-party logging services were slow to consume logging events.

RHEL 8 using OS-level FIPS causes PingFederate failure

Fixed

Fixed a defect that caused PingFederate to fail on startup when installed on a Red Hat Enterprise Linux (RHEL) server with OS-levels FIPS enabled.