CVE-2023-39231 | BDVDB-2026-214898 Detail

Description#

PingFederate using the PingOne MFA adapter allows a new MFA device to be paired without requiring second factor authentication from an existing registered device. A threat actor may be able to exploit this vulnerability to register their own MFA device if they have knowledge of a victim user's first factor credentials.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12023-10-24Record published in the CVE List.
2. Version 22024-09-11Most recent update recorded in the CVE List.