Description (CNA)
The Authentication API in Ping Identity PingFederate before 10.3 mishandles certain aspects of external password management.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Ping Identity / PingFederate | affected 9.2.3 |
| Ping Identity / PingFederate | affected 9.3.3 |
| Ping Identity / PingFederate | affected 10.0.9 |
| Ping Identity / PingFederate | affected 10.1.6 |
| Ping Identity / PingFederate | affected 10.2.3 |
CWE
No CWE identifiers supplied.
References
ADP enrichment
No English description supplied.