CVE-2023-39930

A first-factor authentication bypass vulnerability exists in the PingFederate with PingID Radius PCV when a MSCHAP authentication request is sent via a maliciously crafted RADIUS client request...

PT-2023-27162 · Ping Identity · Pingfederate

Name of the Vulnerable Software and Affected Versions: PingFederate with PingID Radius PCV affected versions not specified Description: A first-factor authentication bypass issue exists when a MSCHAP authentication request is sent via a maliciously crafted RADIUS client request. This allows for...

CVE-2023-39930: Authentication Bypass Using an Alternate Path or Channel

A first-factor authentication bypass vulnerability exists in the PingFederate with PingID Radius PCV when a MSCHAP authentication request is sent via a maliciously crafted RADIUS client request...

CVE-2022-40723: Authentication Bypass by Primary Weakness

The PingID RADIUS PCV adapter for PingFederate, which supports RADIUS authentication with PingID MFA, is vulnerable to MFA bypass under certain configurations...