VULNERABILITY INTELLIGENCE

CVE-2021-42000

CVSS score5.3 MEDIUM
EPSS probability0.53%
CISA KEVNot currently listed
Published2022-02-10
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N

Description

When a password reset or password change flow with an authentication policy is configured and the adapter in the reset or change policy supports multiple parallel reset flows, an existing user can reset another existing users password.

Weakness classification

  • responsible-disclosure@pingidentity.com: CWE-285
  • nvd@nist.gov: NVD-CWE-Other

Primary references