high7.7
CVE-2022-23723
An MFA bypass vulnerability exists in the PingFederate PingOne MFA Integration Kit when adapter HTML templates are used as part of an authentication flow.
Impact
An MFA bypass vulnerability exists in the PingFederate PingOne MFA Integration Kit when adapter HTML templates are used as part of an authentication flow.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pingidentity | Pingone Mfa Integration Kit | Versions 1.4, 1.4.1, 1.5, 1.5.1, 1.5.2 |
Weakness classification
References
- NVD record
- CVE.org record
- https://docs.pingidentity.com/bundle/pingfederate-pingone-mfa-ik/page/wpt1599064234202.html
- https://www.pingidentity.com/en/resources/downloads/pingfederate.html
- https://docs.pingidentity.com/bundle/pingfederate-pingone-mfa-ik/page/wpt1599064234202.html
- https://www.pingidentity.com/en/resources/downloads/pingfederate.html