admin/cvelist
1
0
Fork 0
mirror of https://github.com/CVEProject/cvelist.git synced 2025-07-29 05:56:59 +00:00
Code Issues Packages Projects Releases Wiki Activity

Updating CVE-2022-40722 to CVE-2022-40724 data

Browse Source
This commit is contained in:
davidmcglynn 2023-04-10 16:16:17 -07:00
parent e0fca6ed95
commit 46bf98f84e
No known key found for this signature in database
GPG Key ID: 6D80ABE841409C38
3 changed files with 30 additions and 35 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
2022/40xxx/CVE-2022-40722.json
View File

@ -111,9 +111,9 @@
"references": {
"reference_data": [
{
"name": "**** TBD add release notes ****",
"name": "https://docs.pingidentity.com/r/en-us/pingid/pingid_integration_kit_2_20_rn",
"refsource": "MISC",
"url": ""
"url": "https://docs.pingidentity.com/r/en-us/pingid/pingid_integration_kit_2_20_rn"
},
{
"name": "https://docs.pingidentity.com/r/en-us/pingid/pingid_adapter_configuring_offline_mfa",

39
2022/40xxx/CVE-2022-40723.json
View File

@ -3,7 +3,7 @@
"ASSIGNER": "responsible-disclosure@pingidentity.com",
"ID": "CVE-2022-40723",
"STATE": "PUBLIC",
"TITLE": ""
"TITLE": "Configuration-based MFA Bypass in PingID RADIUS PCV"
},
"affects": {
"vendor": {
@ -46,7 +46,7 @@
}
},
{
"product_name": "PingFederate",
"product_name": "PingFederate (includes Radius PCV)",
"version": {
"version_data": [
{
@ -86,23 +86,23 @@
"description_data": [
{
"lang": "eng",
"value": ""
"value": "The PingID RADIUS PCV adapter for PingFederate, which supports RADIUS authentication with PingID MFA, is vulnerable to MFA bypass under certain configurations."
}
]
},
"impact": {
"cvss": {
"attackComplexity": "",
"attackVector": "",
"availabilityImpact": "",
"baseScore": 0.0,
"baseSeverity": "",
"confidentialityImpact": "",
"integrityImpact": "",
"privilegesRequired": "",
"scope": "",
"userInteraction": "",
"vectorString": "",
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:H/RL:U/RC:C",
"version": "3.1"
}
},
@ -112,7 +112,7 @@
"description": [
{
"lang": "eng",
"value": "CWE-XXX"
"value": "CWE-305 Authentication Bypass by Primary Weakness"
}
]
}
@ -121,14 +121,9 @@
"references": {
"reference_data": [
{
"name": "",
"name": "https://docs.pingidentity.com/r/en-us/pingid/pingid_integration_kit_2_19_rn",
"refsource": "MISC",
"url": ""
},
{
"name": "",
"refsource": "MISC",
"url": ""
"url": "https://docs.pingidentity.com/r/en-us/pingid/pingid_integration_kit_2_19_rn"
}
]
},

22
2022/40xxx/CVE-2022-40724.json
View File

@ -78,17 +78,17 @@
},
"impact": {
"cvss": {
"attackComplexity": "",
"attackVector": "",
"availabilityImpact": "",
"baseScore": 0.0,
"baseSeverity": "",
"confidentialityImpact": "",
"integrityImpact": "",
"privilegesRequired": "",
"scope": "",
"userInteraction": "",
"vectorString": "",
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H/E:H/RL:U/RC:C",
"version": "3.1"
}
},