CVE-2023-37283
published 2023-10-25CVE-2023-37283: Under a very specific and highly unrecommended configuration, authentication bypass is possible in the PingFederate Identifier First Adapter
PriorityP359critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
0.75%
50.2th percentile
Under a very specific and highly unrecommended configuration, authentication bypass is possible in the PingFederate Identifier First Adapter
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ping_identity | pingfederate | 10.3.0 – 10.3.12 | — |
| ping_identity | pingfederate | 11.1.0 – 11.1.7 | — |
| ping_identity | pingfederate | 11.2.0 – 11.2.6 | — |
| ping_identity | pingfederate | 11.3 – 11.3.0 | — |
| pingidentity | pingfederate | — | — |
| pingidentity | pingfederate | 10.3.0 – 10.3.12 | — |
| pingidentity | pingfederate | 11.1.0 – 11.1.7 | — |
| pingidentity | pingfederate | 11.2.0 – 11.2.6 | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2023-10-25
Published