high8.1
CVE-2023-37283
Under a very specific and highly unrecommended configuration, authentication bypass is possible in the PingFederate Identifier First Adapter
Impact
Under a very specific and highly unrecommended configuration, authentication bypass is possible in the PingFederate Identifier First Adapter
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pingidentity | Pingfederate | from 10.3.0 through 10.3.12 from 11.1.0 through 11.1.7 from 11.2.0 through 11.2.6 Version 11.3.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://docs.pingidentity.com/r/en-us/pingfederate-113/gyk1689105783244
- https://www.pingidentity.com/en/resources/downloads/pingfederate.html
- https://docs.pingidentity.com/r/en-us/pingfederate-113/gyk1689105783244
- https://www.pingidentity.com/en/resources/downloads/pingfederate.html