CVE-2022-40723: Pingidentity Pingfederate

Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days.

The PingID RADIUS PCV adapter for PingFederate, which supports RADIUS authentication with PingID MFA, is vulnerable to MFA bypass under certain configurations.

Affected products

• Pingidentity Pingfederate: from 11.1.0, up to and including 11.1.5; from 11.2.0, up to and including 11.2.2
• Pingidentity Pingid Integration Kit: before 2.24 (fixed in 2.24)
• Pingidentity Radius Pcv: from 3.0.0, before 3.0.2 (fixed in 3.0.2); version 2.10.0 only

Published 2023-04-25. Last modified 2026-06-17.