Approved changes feed: RSS · Atom

cpe:2.3:a:pingidentity:pingid_adapter_for_pingfederate:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPingidentity (f56e02bf-5fbe-54aa-9dfd-2b764962bd7c)
ProductPingid Adapter For Pingfederate (7d1b9be7-30c3-5e75-9327-55d77f5f48ff)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-40722 vulnerable 2026-06-03 14:48:03.461679 Misconfiguration of RSA padding for offline MFA in the PingID Adapter for PingFederate.
HIGH (7.7)
A misconfiguration of RSA padding implemented in the PingID Adapter for PingFederate to support Offline MFA with PingID mobile authenticators is vulnerable to pre-computed dictionary attacks, leading to a bypass of offline MFA.
Published: 2023-04-25T00:00:00.000Z
Updated: 2025-02-04T14:49:20.723Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.