| Package | Affected versions | Patched versions |
|---|---|---|
| pingfederate | = 11.3.0 |
Authentication bypass when an OAuth2 Client is using client_secret_jwt as its authentication method on affected 11.3 versions via specially crafted requests.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free