description: The Authentication API in Ping Identity PingFederate before 10.3 mishandles certain aspects of external password management.
problem types: Incorrect Access Control
affected:
{
product: PingFederate
vendor: Ping Identity
versions:
status: affected, version: 9.2.3
}
{
product: PingFederate
vendor: Ping Identity
versions:
status: affected, version: 9.3.3
}
{
product: PingFederate
vendor: Ping Identity
versions:
status: affected, version: 10.0.9
}
{
product: PingFederate
vendor: Ping Identity
versions:
status: affected, version: 10.1.6
}
{
product: PingFederate
vendor: Ping Identity
versions:
status: affected, version: 10.2.3
}
