| Package | Affected versions | Patched versions |
|---|---|---|
| pingfederate | = 11.0.0= 9.3.3≥ 10.0.0, < 10.0.12≥ 10.1.0, < 10.1.9≥ 10.2.0, < 10.2.7≥ 10.3.0, < 10.3.4≥ 9.3.0, < 9.3.3 | 10.0.1210.1.910.2.710.3.49.3.3 |
When a password reset mechanism is configured to use the Authentication API with an Authentication Policy, email One-Time Password, PingID or SMS authentication, an existing user can reset another existing user’s password.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free