Ping Identity Pingid Integration Kit (Includes Pingid Adapter) vulnerabilities

1 vulnerability

Known vulnerabilities in Ping Identity Pingid Integration Kit (Includes Pingid Adapter), newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.7CVE-2022-40722ping identitypingfederate (includes pingid adapter)+5
EPSS score
0.33%
A misconfiguration of RSA padding implemented in the PingID Adapter for PingFederate to support Offline MFA with PingID mobile authenticators is vulnerable to pre-computed dictionary attacks, leading to a bypass of offline MFA.