CVE-2022-23723

The CVE-2022-23723 entry concerns PingFederate PingOne MFA Integration Kit. A vulnerability exists where MFA can be bypassed when adapter HTML templates are used within an authentication flow. Affected: PingFederate PingOne MFA Integration Kit (HTML adapters in the login flow). Root cause: bypass...

CVE-2023-39231

CVE-2023-39231 affects PingFederate with the PingOne MFA adapter, where a threat actor who knows a victim’s first-factor credentials can pair a new MFA device without second-factor authentication. Core impact is unauthorized MFA enrollment, risking account compromise. Affected product/adapter and...