Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2022-40723

Configuration-based MFA Bypass in PingID RADIUS PCV.

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Ping Identity

Description

The PingID RADIUS PCV adapter for PingFederate, which supports RADIUS authentication with PingID MFA, is vulnerable to MFA bypass under certain configurations.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Ping Identity PingID Radius PCV

  • 2.10.0affected
  • 3.0.0 to < 3.0.0*affected
  • 3.0.2 to ≤ 3.0.2affected

Ping Identity PingID Integration Kit (includes Radius PCV)

  • 2.24 to < 2.24affected

Ping Identity PingFederate (includes Radius PCV)

  • 11.1.0 to < 11.1.0*affected
  • 11.1.5 to ≤ 11.1.5affected
  • 11.2.0 to < 11.2.0*affected
  • 11.2.2 to ≤ 11.2.2affected

References