Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Ping Identity Component: Pingid Integration Kit Clear all filters
TI-2022-19357 CVE-2022-40723 · GHSA-5hwc-8c64-25vm

Configuration-based MFA Bypass in PingID RADIUS PCV.

Priority LOW 29

The PingID RADIUS PCV adapter for PingFederate, which supports RADIUS authentication with PingID MFA, is vulnerable to MFA bypass under certain configurations.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00522 Published 2023-04-25 Fixed in 2.24 CWE-305
TI-2022-19356 CVE-2022-40722 · GHSA-7qpc-pm8w-mgv5

Misconfiguration of RSA padding for offline MFA in the PingID Adapter for PingFederate.

Priority LOW 36

A misconfiguration of RSA padding implemented in the PingID Adapter for PingFederate to support Offline MFA with PingID mobile authenticators is vulnerable to pre-computed dictionary attacks, leading to a bypass of offli…

CVSS 3.1HIGH 7.7 Network High privileges No interaction EPSS 0.00328 Published 2023-04-25 Fixed in 2.13.2, 2.24 CWE-780