Description (CNA)
A first-factor authentication bypass vulnerability exists in the PingFederate with PingID Radius PCV when a MSCHAP authentication request is sent via a maliciously crafted RADIUS client request.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Ping Identity / PingID Radius PCV | affected 3.0 before 3.0.3 |
CWE
CWE-288
References
- https://www.pingidentity.com/en/resources/downloads/pingfederate.html
- https://docs.pingidentity.com/r/en-us/pingid/pingid_integration_kit_2_26_rn
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.