PingFederate Google Adapter Thread Exhaustion Vulnerability

A vulnerability in the PingFederate Google Adapter has been identified, stemming from improper management of non-200 HTTP responses. This issue can lead to thread exhaustion under normal usage conditions, potentially causing a denial-of-service scenario.

Impact

Exploitation of this vulnerability can result in thread exhaustion, disrupting normal service operations and potentially causing a denial-of-service condition.

Remediation

Users are advised to upgrade to the latest version of the PingFederate Google Login Integration Kit to address this vulnerability. The updated version can be downloaded from the Ping Identity Downloads page.