CVE-2023-34085 Information

Description

When an AWS DynamoDB table is used for user attribute storage it is possible to retrieve the attributes of another user using a maliciously crafted request

Reference

https://docs.pingidentity.com/r/en-us/pingfederate-113/gyk1689105783244 https://www.pingidentity.com/en/resources/downloads/pingfederate.html