{"vulnerability": "CVE-2022-4072", "sightings": [{"uuid": "718fc924-c290-455f-8326-688bde360d50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-40723", "type": "seen", "source": "https://t.me/cibsecurity/62825", "content": "\u203c CVE-2022-40723 \u203c\n\nThe PingID RADIUS PCV adapter for PingFederate, which supports RADIUS authentication with PingID MFA, is vulnerable to MFA bypass under certain configurations.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-25T22:25:08.000000Z"}, {"uuid": "60da62c7-3acb-4cb0-9509-ab8b82839935", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-40725", "type": "seen", "source": "https://t.me/cibsecurity/62830", "content": "\u203c CVE-2022-40725 \u203c\n\nPingID Desktop prior to the latest released version 1.7.4 contains a vulnerability that can be exploited to bypass the maximum PIN attempts permitted before the time-based lockout is activated.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-25T22:25:14.000000Z"}, {"uuid": "6861e4d5-080e-48bc-9da2-247434b6ec72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2022-4072", "type": "seen", "source": "https://t.me/cibsecurity/53214", "content": "\u203c CVE-2022-4072 \u203c\n\nA vulnerability classified as problematic was found in Iridium Intelligence bad_ip WP Plugin. Affected by this vulnerability is an unknown functionality of the component HTTP Header Handler. The manipulation of the argument X-Forwarded-For leads to improper output neutralization for logs. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-214039.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-11-20T16:36:17.000000Z"}]}