Skip to content
OpenAdvisories

Product · Ping Identity

PingAM

2 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.5

    Improper Claim Validation in PingAM OIDC Provider

    An improper validation vulnerability exists within PingAM where a well-crafted request allows arbitrary or protected ID Token claims to be set or overridden. In certain configurations this could allow an attacker to bypass authentication controls via spoofing…