CVSS 3.1
6.5 mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:NCVE-2021-42000
Medium (6.5) in pingidentity pingfederate. EPSS 0.5% chance of exploitation in the next 30 days.
When a password reset or password change flow with an authentication policy is configured and the adapter in the reset or change policy supports multiple parallel reset flows, an existing user can reset another existing users password.
Severity
- EPSS
- 0.5% chance of exploitation in the next 30 days; higher than 45% of CVEs (scores of 2026-10-31)
- CWE
- CWE-285
- Published
- Modified
- Record from
- the NVD, synced
Affected
- pingidentity:pingfederate