CVE-2022-40723CWE-305

Configuration-based MFA Bypass in PingID RADIUS PCV.

Medium · published April 25, 2023

CVSS v3.1
6.5
EPSS
1%
Percentile
43.4
In the wild
Unconfirmed
What it is

The PingID RADIUS PCV adapter for PingFederate, which supports RADIUS authentication with PingID MFA, is vulnerable to MFA bypass under certain configurations.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:H/RL:U/RC:C
CVSS v4.0
Not supplied
EPSS
0.00522 · 43.4th percentile
Weakness
CWE-305 · Authentication Bypass by Primary Weakness
Published
2023-04-25T00:00Z
EPSS history
Timeline
  • 25 APR 00:00Z
    Configuration-based MFA Bypass in PingID RADIUS PCV.
    cvelistv5