In Ping Identity RSA SecurID Integration Kit prior to 3.2, user impersonation can occur.
pingidentity rsa securid integration kit