Vulnerability in Ping Identity Pingone Mfa Integration Kit For Pingfederate

CVE-2023-40702

PingOne MFA Integration Kit contains a vulnerability where the skipMFA action can be configured such that user authentication does not require the second factor authentication from the user's existing registered devices. A threat actor mig…

EPSS: 0.004 (31.9th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References