← All advisories

Critical severity9.8NVD Advisory· Published Sep 27, 2021· Updated Jun 17, 2026

CVE-2021-40329

CVE-2021-40329

Description

The Authentication API in Ping Identity PingFederate before 10.3 mishandles certain aspects of external password management.

Affected products

3

Pingidentity/Pingfederate3 versions
cpe:2.3:a:pingidentity:pingfederate:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:pingidentity:pingfederate:*:*:*:*:*:*:*:*range: <10.3
- (no CPE)range: <10.3
- (no CPE)range: 10.2.3

Patches

Vulnerability mechanics

References

1

docs.pingidentity.com/bundle/pingfederate-103/page/cou1615333347158.htmlnvd

News mentions

0

No linked articles in our index yet.