CVE-2021-40329
Assigner: Ping Identity
Published: 2021-09-27T16:22:11
State: PUBLISHED
affected: product: PingFederate
vendor: Ping Identity
versions: status: affected
version: 9.2.3
product: PingFederate
vendor: Ping Identity
versions: status: affected
version: 9.3.3
product: PingFederate
vendor: Ping Identity
versions: status: affected
version: 10.0.9
product: PingFederate
vendor: Ping Identity
versions: status: affected
version: 10.1.6
product: PingFederate
vendor: Ping Identity
versions: status: affected
version: 10.2.3
descriptions: value: The Authentication API in Ping Identity PingFederate before 10.3 mishandles certain aspects of external password management.
problemTypes: descriptions: description: Incorrect Access Control
type: text