PingFederate Excessive Memory Utilization Vulnerability Due to OAuth2 Grant Duplication in PostgreSQL Storage

A vulnerability in PingFederate allows for excessive memory usage due to OAuth2 grant duplication in PostgreSQL persistent storage. This issue arises from the way OAuth2 requests are handled, leading to inefficient memory utilization.

Impact

Excessive memory consumption, which could potentially lead to a denial-of-service condition by exhausting available system resources.

Remediation

Users can update their existing PingFederate 12.2 environment to the latest maintenance release. Instructions for downloading the latest version or performing an in-place update are available on the Ping Identity website.