Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Ping Identity PingOne MFA Integration Kit for PingFederate 2.3.1 Clear all filters
TI-2023-21185 CVE-2023-40356 · GHSA-5hj4-9975-4r5m

PingOne MFA Integration Kit MFA bypass

Priority MEDIUM 40

PingOne MFA Integration Kit contains a vulnerability related to the Prompt Users to Set Up MFA configuration.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00401 Published 2024-07-09 Fixed in 2.3.1 CWE-290
TI-2023-21487 CVE-2023-40702 · GHSA-66pr-wch7-q6h3

PingOne MFA Integration Kit MFA bypass

Priority LOW 36

PingOne MFA Integration Kit contains a vulnerability where the skipMFA action can be configured such that user authentication does not require the second factor authentication from the user's existing registered devices.

CVSS 4.0HIGH 7.7 Network Low privileges No interaction EPSS 0.00401 Published 2024-07-09 Fixed in 2.3.1 CWE-290