CVE-2023-39930

Summary

CVE-2023-39930 is a recently disclosed vulnerability affecting PingFederate with PingID Radius. The issue involves a first-factor authentication bypass, which can be exploited when a maliciously crafted RADIUS client request containing an MSCHAP authentication method is sent to the affected system. Successful exploitation allows unauthorized access to user accounts, potentially leading to data breaches and other security risks. Organizations using PingFederate with PingID Radius are advised to apply the vendor-released patch or update as soon as possible to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.