CVE-2022-23724

Use of static encryption key material allows forging an authentication token to other users within a tenant organization. MFA may be bypassed by redirecting an authentication flow to a target user. To exploit the vulnerability, must have compromised user credentials...

CVE-2022-23724

Ping Identity PingID Integration for Windows Login (PingID Windows PingId) is affected by a flaw where static encryption key material enables forging an authentication token to other users within a tenant. This can allow MFA bypass by redirecting an authentication flow to a target user, and explo...