CVE-2022-40723

6.5 mediumEPSS 0.5%

Medium (6.5) in pingidentity. EPSS 0.5% chance of exploitation in the next 30 days.

The PingID RADIUS PCV adapter for PingFederate, which supports RADIUS authentication with PingID MFA, is vulnerable to MFA bypass under certain configurations.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 44% of CVEs (scores of 2026-10-31)
CWEs: CWE-287, CWE-305
Published: 2023-04-25
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

pingidentity:pingfederate
pingidentity:pingid_integration_kit
pingidentity:radius_pcv

References

https://docs.pingidentity.com/r/en-us/pingid/pingid_integration_kit_2_19_rn
https://docs.pingidentity.com/r/en-us/pingid/pingid_integration_kit_2_19_rn

Check your stack JSON