Beveiligingsadvies

CVE-2025-27935

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-12-04 20:38:31

Laatst bijgewerkt 2025-12-05 17:33:20

Toegewezen door Ping Identity

CVSS-score 8.6

Status PUBLISHED

Beschrijving

The OTP Integration Kit for PingFederate fails to enforce HTTP method validation and state validation properly. The server advances the authentication state without verifying the OTP, thereby bypassing multi-factor authentication.

← Alle CVE's bekijken Bekijk op cve.org ↗