Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2023-40702

PingOne MFA Integration Kit MFA bypass

PingOne MFA Integration Kit contains a vulnerability where the skipMFA action can be configured such that user authentication does not require the second factor authentication from the user's existing registered devices. A threat actor might be able to exploit this vulnerability to authenticate as a target user if they have existing knowledge of the target user’s first-factor credentials.

CVSS 4.0 · 7.7 High EPSS < 1% KEV · Not listed
Vendors
Pingidentity
Products
Pingone Mfa Integration Kit
CVE-2023-39231

PingFederate PingOne MFA IK Device Pairing Second Factor Authentication Bypass

PingFederate using the PingOne MFA adapter allows a new MFA device to be paired without requiring second factor authentication from an existing registered device. A threat actor may be able to exploit this vulnerability to register their own MFA device if they have knowledge of a victim user's first factor credentials.

CVSS 3.1 · 7.3 High EPSS < 1% KEV · Not listed
Vendors
Pingidentity
Products
Pingone Mfa Integration Kit
CVE-2022-23723

PingFederate PingOneMFA Integration Kit MFA Bypass

An MFA bypass vulnerability exists in the PingFederate PingOne MFA Integration Kit when adapter HTML templates are used as part of an authentication flow.

CVSS 3.1 · 7.7 High EPSS < 1% KEV · Not listed
Vendors
Pingidentity
Products
Pingone Mfa Integration Kit