One-Time Passcode Integration Kit for PingFederate vulnerabilities
1 known vulnerability in One-Time Passcode Integration Kit for PingFederate from Ping Identity. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
8.6average CVSS score
Latest first
- 8.6 High severity
One-Time Passcode Integration Kit for…: Missing Authentication for Critical Functionality
The OTP Integration Kit for PingFederate fails to enforce HTTP method validation and state validation properly. The server advances the authentication state without verifying the OTP, thereby bypassing multi-factor authentication.