← All advisories

High severity8.1NVD Advisory· Published Oct 25, 2023· Updated Jun 17, 2026

CVE-2023-37283

CVE-2023-37283

Description

Under a very specific and highly unrecommended configuration, authentication bypass is possible in the PingFederate Identifier First Adapter

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

Pingidentity/Pingfederate4 versions
cpe:2.3:a:pingidentity:pingfederate:*:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:pingidentity:pingfederate:*:*:*:*:*:*:*:*range: >=10.3.0,<=10.3.12
- cpe:2.3:a:pingidentity:pingfederate:11.3.0:*:*:*:*:*:*:*
- (no CPE)
- (no CPE)range: 11.3

Patches

Vulnerability mechanics

References

2

docs.pingidentity.com/r/en-us/pingfederate-113/gyk1689105783244nvdRelease Notes
www.pingidentity.com/en/resources/downloads/pingfederate.htmlnvdProduct

News mentions

0

No linked articles in our index yet.