Description (CNA)
Unexpected authentication form rendering in HTML Form Adapter using only non-default redirectless mode in PingFederate allows authentication attempts which may enable brute force login attacks.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Ping Identity / PingFederate | affected 11.3.0 before 11.3.14; affected 12.0.0 before 12.0.10; affected 12.1.0 before 12.1.9; affected 12.2.0 before 12.2.6; affected 12.3.0 before 12.3.3 |
CWE
CWE-307
References
- https://support.pingidentity.com/s/article/PingFederate-unexpected-template-rendering-in-redirectless-mode
- https://www.pingidentity.com/en/resources/downloads/pingfederate.html
ADP enrichment
No English description supplied.
No references supplied.