← Back

Pingone Mfa Integration Kit

pingone_mfa_integration_kit

Vendor: Pingidentity • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-39231
1Pingidentity
1Pingone Mfa Integration Kit
Jun 17, 2026
Oct 25, 2023
N/A· v4
6.5 MEDIUM· v3
N/A· v2
PingFederate using the PingOne MFA adapter allows a new MFA device to be paired without requiring second factor authentication from an existing registered device. A threat actor may be able to exploit this vulnerability...Show more
PingFederate using the PingOne MFA adapter allows a new MFA device to be paired without requiring second factor authentication from an existing registered device. A threat actor may be able to exploit this vulnerability to register their own MFA device if they have knowledge of a victim user's first factor credentials.Show less
CVE-2022-23723
1Pingidentity
1Pingone Mfa Integration Kit
Jun 17, 2026
May 2, 2022
N/A· v4
7.7 HIGH· v3
5.0 MEDIUM· v2
An MFA bypass vulnerability exists in the PingFederate PingOne MFA Integration Kit when adapter HTML templates are used as part of an authentication flow.