A vulnerability was found in
Ping Identity PingAM Java Policy Agent up to 5.10.3/2023.11.1/2024.9. It has been rated as
critical. Affected by this issue is some unknown functionality. The manipulation leads to relative path traversal.
This vulnerability is handled as
CVE-2025-20059. The attack may be launched remotely. There is no exploit available.