Description
Unexpected authentication form rendering in HTML Form Adapter using only non-default redirectless mode in PingFederate allows authentication attempts which may enable brute force login attacks.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Ping Identity | PingFederate | 11.3.0 – < 11.3.14, 12.0.0 – < 12.0.10, 12.1.0 – < 12.1.9, 12.2.0 – < 12.2.6, 12.3.0 – < 12.3.3 | 11.3.14 |