📦 Pingfederate

This vulnerability allows attackers to bypass authentication in PingFederate OAuth2 clients using client_secret_jwt authentication. Attackers can send specially crafted requests to gain unauthorized a...

This vulnerability allows authentication bypass in PingFederate's Identifier First Adapter when configured in a specific, non-recommended way. Attackers could potentially gain unauthorized access to p...

This vulnerability allows attackers to bypass offline multi-factor authentication (MFA) in PingID Adapter for PingFederate through pre-computed dictionary attacks targeting RSA padding misconfiguratio...

This vulnerability allows unauthorized users to access the deploy directory on PingFederate runtime nodes, potentially exposing sensitive configuration files. It affects organizations running vulnerab...