CVE-2022-40722

🗓️ 25 Apr 2023 00:00:00Reported by Ping IdentityType

A misconfiguration of RSA padding in PingID Adapter for PingFederate allows pre-computed dictionary attacks

Reporter	Title	Published	Views	Family All 7
CNNVD	PingID Adapter 加密问题漏洞	25 Apr 202300:00	–	cnnvd
Cvelist	CVE-2022-40722 Misconfiguration of RSA padding for offline MFA in the PingID Adapter for PingFederate.	25 Apr 202300:00	–	cvelist
NVD	CVE-2022-40722	25 Apr 202319:15	–	nvd
Prion	Design/Logic Flaw	25 Apr 202319:15	–	prion
Positive Technologies	PT-2023-13897 · Ping Identity · Pingid Adapter For Pingfederate	25 Apr 202300:00	–	ptsecurity
RedhatCVE	CVE-2022-40722	5 Feb 202519:51	–	redhatcve
Vulnrichment	CVE-2022-40722 Misconfiguration of RSA padding for offline MFA in the PingID Adapter for PingFederate.	25 Apr 202300:00	–	vulnrichment

NVD

Node

pingidentity pingfederateRange11.1.0–11.1.5

pingidentity pingfederateRange11.2.0–11.2.2

pingidentity pingid_adapter_for_pingfederateRange<2.13.2

pingidentity pingid_integration_kitRange<2.24

[
  {
    "vendor": "Ping Identity",
    "product": "PingID Adapter for PingFederate",
    "versions": [
      {
        "version": "2.13.2",
        "status": "affected",
        "lessThan": "2.13.2",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "Ping Identity",
    "product": "PingID Integration Kit (includes PingID Adapter)",
    "versions": [
      {
        "version": "2.24",
        "status": "affected",
        "lessThan": "2.24",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "Ping Identity",
    "product": "PingFederate (includes PingID Adapter)",
    "versions": [
      {
        "version": "11.1.0",
        "status": "affected",
        "lessThan": "11.1.0*",
        "versionType": "custom"
      },
      {
        "version": "11.1.5",
        "status": "affected",
        "lessThanOrEqual": "11.1.5",
        "versionType": "custom"
      },
      {
        "version": "11.2.0",
        "status": "affected",
        "lessThan": "11.2.0*",
        "versionType": "custom"
      },
      {
        "version": "11.2.2",
        "status": "affected",
        "lessThanOrEqual": "11.2.2",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
docs	www.docs.pingidentity.com/r/en-us/pingid/pingid_adapter_configuring_offline_mfa
docs	www.docs.pingidentity.com/r/en-us/pingid/pingid_integration_kit_2_20_rn

21 Nov 2024 07:21Current

5.9Medium risk

Vulners AI Score5.9

CVSS 3.15.8 - 7.7

EPSS0.00145

SSVC