Executive brief
PingFederate is an identity and access management platform used by enterprises to control user authentication and authorization. An improper access control flaw in the administrative expression evaluation functionality could allow users with certain admin roles to access testing capabilities they should not be permitted to use, potentially exposing sensitive information or allowing unauthorized configuration changes.
Technical details
A role-based access control (RBAC) vulnerability exists in PingFederate's administrative expression evaluation endpoint. The vulnerability allows users with certain administrative roles to bypass authorization checks and access expression testing capabilities beyond their intended permissions. This is an improper authorization flaw in a sensitive administrative feature. The attack vector requires network access and valid administrative credentials. An attacker with an affected administrative role could evaluate expressions they are not authorized to access, potentially leading to information disclosure or privilege escalation within the administrative interface.
Affected products
- Ping Identity PingFederate
Timeline
- 2026-09-14: disclosed