High severity7.5NVD Advisory· Published Oct 25, 2023· Updated Jun 17, 2026

CVE-2023-39930

Description

A first-factor authentication bypass vulnerability exists in the PingFederate with PingID Radius PCV when a MSCHAP authentication request is sent via a maliciously crafted RADIUS client request.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Pingidentity/Pingid Radius Pcv
cpe:2.3:a:pingidentity:pingid_radius_pcv:*:*:*:*:*:*:*:*
Range: >=3.0.0,<3.0.3
Pingidentity/Pingfederatellm-fuzzy
Pingtel/Pingid Radius Pcvv5
Range: 3.0

Patches

Vulnerability mechanics

References

docs.pingidentity.com/r/en-us/pingid/pingid_integration_kit_2_26_rnnvdRelease Notes
www.pingidentity.com/en/resources/downloads/pingfederate.htmlnvdProduct

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000