CVE-2023-39930: PingFederate PingID Radius PCV Authentication Bypass
A first-factor authentication bypass vulnerability exists in the PingFederate with PingID Radius PCV when a MSCHAP authentication request is sent via a maliciously crafted RADIUS client request.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-39930?
The severity of CVE-2023-39930 is critical, with a severity value of 9.8.
How does the first-factor authentication bypass vulnerability in PingFederate with PingID Radius PCV (CVE-2023-39930) occur?
The vulnerability occurs when a maliciously crafted RADIUS client request containing an MSCHAP authentication request is sent.
Which software is affected by CVE-2023-39930?
The PingFederate with PingID Radius PCV software is affected by CVE-2023-39930.
Is there a fix available for CVE-2023-39930?
Yes, a fix is available. It is recommended to update to version 3.0.3 of PingFederate with PingID Radius PCV.
Where can I get more information about CVE-2023-39930?
You can find more information about CVE-2023-39930 at the following references: [Link 1](https://docs.pingidentity.com/r/en-us/pingid/pingid_integration_kit_2_26_rn), [Link 2](https://www.pingidentity.com/en/resources/downloads/pingfederate.html)