Pingidentity Pingid Integration Kit vulnerabilities

2 vulnerabilities

Known vulnerabilities in Pingidentity Pingid Integration Kit, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.5CVE-2022-40723ping identitypingfederate (includes radius pcv)+5
EPSS score
0.52%
The PingID RADIUS PCV adapter for PingFederate, which supports RADIUS authentication with PingID MFA, is vulnerable to MFA bypass under certain configurations.7.7CVE-2022-40722ping identitypingfederate (includes pingid adapter)+5
EPSS score
0.33%
A misconfiguration of RSA padding implemented in the PingID Adapter for PingFederate to support Offline MFA with PingID mobile authenticators is vulnerable to pre-computed dictionary attacks, leading to a bypass of offline MFA.