Description
The PingID RADIUS PCV adapter for PingFederate, which supports RADIUS authentication with PingID MFA, is vulnerable to MFA bypass under certain configurations.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Ping Identity | PingID Radius PCV | 2.10.0, 3.0.0 – < 3.0.0*, 3.0.2 – ≤ 3.0.2 | 3.0.0* |
| Ping Identity | PingID Integration Kit (includes Radius PCV) | 2.24 – < 2.24 | 2.24 |
| Ping Identity | PingFederate (includes Radius PCV) | 11.1.0 – < 11.1.0*, 11.1.5 – ≤ 11.1.5, 11.2.0 – < 11.2.0*, 11.2.2 – ≤ 11.2.2 | 11.1.0* |