Ping Identity 脆弱性

タイムライン

タイプ

Not Defined29
iOS App Software1
Android App Software1
SSH Server Software1

製品

Ping Identity PingID11
Ping Identity PingFederate10
Ping Identity PingDirectory1
Ping Identity PingOne MFA Integration Kit1
Ping Identity Self-Service Account Manager1

修復

Official Fix20
Temporary Fix0
Workaround0
Unavailable0
Not Defined12

悪用可能性

High0
Functional0
Proof-of-Concept1
Unproven0
Not Defined31

アクセスベクター

Not Defined0
Physical2
Local1
Adjacent11
Network18

認証

Not Defined0
High9
Low10
None13

ユーザー操作

Not Defined0
Required7
None25

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤41
≤57
≤610
≤78
≤83
≤93
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤41
≤58
≤610
≤77
≤83
≤93
≤100

VulDB

≤10
≤23
≤33
≤44
≤59
≤64
≤76
≤83
≤90
≤100

NVD

≤10
≤20
≤30
≤40
≤52
≤63
≤74
≤83
≤94
≤104

CNA

≤10
≤20
≤31
≤41
≤51
≤62
≤75
≤812
≤92
≤100

ベンダー

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

0dayエクスプロイト

<1k11
<2k17
<5k4
<10k0
<25k0
<50k0
<100k0
≥100k0

本日のエクスプロイト

<1k29
<2k3
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

闇ツールの市場規模

🔴 CTI アクティビティ

Affected Products (13): Agentless Integration Kit (1), OpenID Connect Authentication Module (1), PingAccess (1), PingCentral (1), PingDirectory (1), PingFederate (10), PingFederate PingOne MFA Integration Kit (1), PingID (11), PingID Desktop (1), PingID SSH (1), PingOne MFA Integration Kit (1), RSA SecurID Integration Kit (1), Self-Service Account Manager (1)

公開済みBaseTemp脆弱性Prod悪修復EPSSCTICVE
2024年04月10日6.96.8Ping Identity PingFederate HTTP POST Request 特権昇格未知Not DefinedOfficial Fix0.000430.04CVE-2023-40148
2024年02月06日8.68.6Ping Identity PingFederate Requests 弱い認証未知Not DefinedNot Defined0.000670.03CVE-2023-40545
2024年02月02日7.67.5Ping Identity PingDirectory 特権昇格未知Not DefinedOfficial Fix0.000550.04CVE-2023-36496
2023年10月25日6.06.0Ping Identity PingOne MFA Integration Kit 弱い認証未知Not DefinedNot Defined0.000460.02CVE-2023-39231
2023年10月25日7.97.9Ping Identity PingFederate Radius PCV 弱い認証未知Not DefinedNot Defined0.000910.08CVE-2023-39930
2023年10月25日8.18.1Ping Identity PingFederate Identifier First Adapter 弱い認証未知Not DefinedNot Defined0.000910.02CVE-2023-37283
2023年10月25日6.26.2Ping Identity PingFederate Java サービス拒否未知Not DefinedNot Defined0.000460.04CVE-2023-39219
2023年10月25日3.23.2Ping Identity PingFederate AWS DynamoDB Table 情報の漏洩未知Not DefinedNot Defined0.000450.00CVE-2023-34085
2023年04月25日6.56.5Ping Identity PingFederate GET Request idprofile.ping 未知の脆弱性未知Not DefinedNot Defined0.000580.02CVE-2022-40724
2023年04月09日4.44.3Ping Identity Self-Service Account Manager SSAMController.java クロスサイトスクリプティング未知Not DefinedOfficial Fix0.000900.04CVE-2018-25084

22 非表示のエントリあり

🔒 Login Required

You need to signup and login to see more of the remaining 22 results.

◂ 前概要次 ▸

Do you know our Splunk app?

Download it now for free!