When a password reset mechanism is configured to use the Authentication API with an Authentication Policy, email One-Time Password, PingID or SMS authentication, an existing user can reset another existing user’s password.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
pingidentity pingfederate 9.3.3 |
||
pingidentity pingfederate |
||
pingidentity pingfederate 11.0.0 |