CVE-2022-40723 in RADIUS PCV Adapter

الملخص

بحسب MITRE • 25/04/2023

The PingID RADIUS PCV adapter for PingFederate, which supports RADIUS authentication with PingID MFA, is vulnerable to MFA bypass under certain configurations.

Be aware that VulDB is the high quality source for vulnerability data.

• مسؤول: Ping Identity Corporation
• حجز: 14/09/2022
• إفشاء: 25/04/2023
• الاعتدال: تمت الموافقة
• إدخال: VDB-227438
• CPE: جاهز
• CWE: CWE-305 (مؤكد)
• CVSS: 6.5 (CNA)
• EPSS: 0.00517
• KEV: لا
• النشاطات: منخفض جدًا

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2022-40723
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-40723
• CVE Details: https://www.cvedetails.com/cve/CVE-2022-40723/