We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

THREATINT
PUBLISHED

CVE-2025-21085

PingFederate OAuth Grant attribute duplication may use excessive memory



Description

PingFederate OAuth2 grant duplication in PostgreSQL persistent storage allows OAuth2 requests to use excessive memory utilization.

Reserved 2025-04-16 | Published 2025-06-15 | Updated 2025-06-15 | Assigner Ping Identity


LOW: 2.1CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L/S:P/AU:Y/R:A/RE:L/U:Amber

Problem types

CWE-462 Duplicate Key in Associative List

Product status

Default status
unaffected

12.2.0 before 12.2.4
affected

12.1.0 before 12.1.9
affected

12.0 before 12.0.9
affected

11.3.0 before 11.3.13
affected

References

support.pingidentity.com/...bute-duplication-with-PostgreSQL mitigation

www.pingidentity.com/...esources/downloads/pingfederate.html patch

cve.org (CVE-2025-21085)

nvd.nist.gov (CVE-2025-21085)

Download JSON

Share this page
https://cve.threatint.eu/CVE/CVE-2025-21085

Support options

Helpdesk Chat, Email, Knowledgebase
© Copyright 2025 THREATINT
Made in Cyprus with ❤ + ☼
 System status
Find us on
Data Privacy
Terms of Use
Logo BSI Allianz für Cyber-Sicherheit
Error loading Crisp.chat. Please check your web content filter and browser plugins.