Lucene search
Ping IdentityCVELIST:CVE-2022-23723HistoryMay 02, 2022 - 10:05 p.m.
CVE-2022-23723 PingFederate PingOneMFA Integration Kit MFA Bypass
2022-05-0222:05:15
CWE-288
Ping Identity
www.cve.org
3
mfa bypass
pingfederate
pingonemfa
integration kit
authentication flow
CVSS3
7.7
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N
AI Score
7.9
Confidence
High
EPSS
0.001
Percentile
28.4%
An MFA bypass vulnerability exists in the PingFederate PingOne MFA Integration Kit when adapter HTML templates are used as part of an authentication flow.
CNA Affected
[
{
"product": "PingFederate PingOne MFA Integration Kit",
"vendor": "Ping Identity",
"versions": [
{
"status": "affected",
"version": "1.4"
},
{
"status": "affected",
"version": "1.4.1"
},
{
"status": "affected",
"version": "1.5"
},
{
"status": "affected",
"version": "1.5.1"
},
{
"status": "affected",
"version": "1.5.2"
}
]
}
]Related
cve
cve
CVE-2022-23723
2022-05-02 22:15:09
nvd
nvd
CVE-2022-23723
2022-05-02 22:15:09
prion
prion
Security feature bypass
2022-05-02 22:15:00
CVSS3
7.7
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N
AI Score
7.9
Confidence
High
EPSS
0.001
Percentile
28.4%
Related for CVELIST:CVE-2022-23723