CVE-2022-40722

概要

参考情報

• docs.pingidentity.com/r/en-us/pingid/pingid_adapter_configuring_offline_mfa · Product
• docs.pingidentity.com/r/en-us/pingid/pingid_integration_kit_2_20_rn · Release Notes

pingfederate のその他の脆弱性

• CVE-2024-22477中 4.3A cross-site scripting vulnerability exists in the admin console OIDC Policy Management Editor. The impact is contained to admin console use…
• CVE-2024-22377中 5.3The deploy directory in PingFederate runtime nodes is reachable to unauthorized users.
• CVE-2023-40545緊急 9.8Authentication bypass when an OAuth2 Client is using client_secret_jwt as its authentication method on affected 11.3 versions via specially …
• CVE-2023-39219高 7.5PingFederate Administrative Console dependency contains a weakness where console becomes unresponsive with crafted Java class loading enumer…
• CVE-2023-37283緊急 9.8Under a very specific and highly unrecommended configuration, authentication bypass is possible in the PingFederate Identifier First Adapter…