PT-2023-13898 · Ping Identity · Pingid Radius Pcv Adapter

CVE-2022-40723 · Publicado 2023-04-25 · Atualizado 2023-05-04

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions PingID RADIUS PCV adapter for PingFederate (affected versions not specified)

Description The issue concerns a bypass of multi-factor authentication (MFA) under certain configurations. It affects the PingID RADIUS PCV adapter for PingFederate, which is used for RADIUS authentication with PingID MFA.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Enumeração de Fraquezas

CWE-287

CWE-305

Identificadores relacionados

CVE-2022-40723

Produtos afetados

Pingid Radius Pcv Adapter

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2022-40723 · Nota de Segurança
• https://docs.pingidentity.com/r/en-us/pingid/pingid_integration_kit_2_19_rn · Nota
• https://t.me/cibsecurity/62825 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2022-40723 · Aviso do Fabricante