medium6.5
CVE-2022-40723
The PingID RADIUS PCV adapter for PingFederate, which supports RADIUS authentication with PingID MFA, is vulnerable to MFA bypass under certain configurations.
Impact
The PingID RADIUS PCV adapter for PingFederate, which supports RADIUS authentication with PingID MFA, is vulnerable to MFA bypass under certain configurations.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pingidentity | Pingfederate | from 11.1.0 through 11.1.5 from 11.2.0 through 11.2.2 |
| Pingidentity | Pingid Integration Kit | before 2.24 |
| Pingidentity | Radius Pcv | from 3.0.0 before 3.0.2 Version 2.10.0 |