Pingid Integration Kit CVEs and Security Vulnerabilities

Vulnerabilities (Pingid Integration Kit)

CVE-2022-40722

Misconfiguration of RSA padding for offline MFA in the PingID Adapter for PingFederate.

A misconfiguration of RSA padding implemented in the PingID Adapter for PingFederate to support Offline MFA with PingID mobile authenticators is vulnerable to pre-computed dictionary attacks, leading to a bypass of offline MFA.

CVSS 3.1 · 7.7 High EPSS < 1% KEV · Not listed

Vendors

Pingidentity

Products

Pingfederate Pingid Adapter For Pingfederate Pingid Integration Kit

CVE-2022-40723

Configuration-based MFA Bypass in PingID RADIUS PCV.

The PingID RADIUS PCV adapter for PingFederate, which supports RADIUS authentication with PingID MFA, is vulnerable to MFA bypass under certain configurations.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Pingidentity

Products

Pingfederate Pingid Integration Kit Radius Pcv

Search vulnerabilities

Misconfiguration of RSA padding for offline MFA in the PingID Adapter for PingFederate.

Configuration-based MFA Bypass in PingID RADIUS PCV.