Ping Identity

Records59All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical9CVSS 9.0–10.0

CVSS high22CVSS 7.0–8.9

Exploited now

Ping Identity records in CISA KEV

No Ping Identity vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Pingfederate 14 records MEDIUM Pingid Integration For Windows Login 9 records LOW Pingid 2 records LOW Pingid Integration Kit 2 records LOW Pingid Windows Login 2 records LOW Pingone Mfa Integration Kit 2 records LOW Agentless Integration Kit 1 record LOW Desktop 1 record LOW

Records

2 records in Pingone Mfa Integration Kit · all components

TI-2023-20386 CVE-2023-39231 · GHSA-gqc6-p5c3-q963

PingFederate PingOne MFA IK Device Pairing Second Factor Authentication Bypass

LOW 35

PingFederate using the PingOne MFA adapter allows a new MFA device to be paired without requiring second factor authentication from an existing registered device.

CVSS 3.1HIGH 7.3 Network Low privileges User interaction EPSS 0.00655 Published 2023-10-24 Fixed in 2.2.1 CWE-288

TI-2022-07775 CVE-2022-23723 · GHSA-hmwv-wmm7-qrjr

PingFederate PingOneMFA Integration Kit MFA Bypass

LOW 35

An MFA bypass vulnerability exists in the PingFederate PingOne MFA Integration Kit when adapter HTML templates are used as part of an authentication flow.

CVSS 3.1HIGH 7.7 Network High privileges No interaction EPSS 0.00883 Published 2022-05-02 No fix listed CWE-288

Open these records in search →