VULNERABILITY INTELLIGENCE

CVE-2023-40702

CVSS score7.7 HIGH

EPSS probability0.40%

CISA KEVNot currently listed

Published2024-07-09

Last modified2026-06-17

Description

PingOne MFA Integration Kit contains a vulnerability where the skipMFA action can be configured such that user authentication does not require the second factor authentication from the user's existing registered devices. A threat actor might be able to exploit this vulnerability to authenticate as a…