CVE-2026-21391 : 상세 정보

CVE-2026-21391

2026-09-14
12h17 +00:00
A07-Identif. and Authent. Fail
2026-09-18
19h30 +00:00
특정 CVE 알림
특정 CVE의 변경 사항에 대한 정보를 받아보세요.
알림 관리

CVE 설명

An improper validation vulnerability exists within PingAM where a well-crafted request allows arbitrary or protected ID Token claims to be set or overridden. In certain configurations this could allow an attacker to bypass authentication controls via spoofing leading to privilege escalation or impersonation.

CVE 정보

관련 약점

CWE-ID 약점 이름 출처
CWE-290 Authentication Bypass by Spoofing
This attack-focused weakness is caused by incorrectly implemented authentication schemes that are subject to spoofing attacks.

참고 자료