Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-40329

The Authentication API in Ping Identity PingFederate before 10.3 mishandles certain aspects of external password management.

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Ping Identity

Description

The Authentication API in Ping Identity PingFederate before 10.3 mishandles certain aspects of external password management.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Ping Identity PingFederate

  • 9.2.3affected

Ping Identity PingFederate

  • 9.3.3affected

Ping Identity PingFederate

  • 10.0.9affected

Ping Identity PingFederate

  • 10.1.6affected

Ping Identity PingFederate

  • 10.2.3affected

References