high7.5
CVE-2023-39930
A first-factor authentication bypass vulnerability exists in the PingFederate with PingID Radius PCV when a MSCHAP authentication request is sent via a malicio…
Impact
A first-factor authentication bypass vulnerability exists in the PingFederate with PingID Radius PCV when a MSCHAP authentication request is sent via a maliciously crafted RADIUS client request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pingidentity | Pingid Radius Pcv | from 3.0.0 before 3.0.3 |
Weakness classification
References
- NVD record
- CVE.org record
- https://docs.pingidentity.com/r/en-us/pingid/pingid_integration_kit_2_26_rn
- https://www.pingidentity.com/en/resources/downloads/pingfederate.html
- https://docs.pingidentity.com/r/en-us/pingid/pingid_integration_kit_2_26_rn
- https://www.pingidentity.com/en/resources/downloads/pingfederate.html