Vulnerability in Ping Identity Pingidm
CVE-2025-20628
An insufficient granularity of access control vulnerability exists in PingIDM (formerly ForgeRock Identity Management) where administrators cannot properly configure access rules for Remote Connector Servers (RCS) running in client mode. T…
EPSS: 0.001 (18.6th percentile) — read the EPSS interpretation.
Affected products
- Ping Identity Pingidm — versions 7.5.0, 7.4.0, 7.3.0