Ping Identity Program Statistics

View program

11 total issues disclosed

$1,350 total paid publicly

Most disclosed (2 disclosures) — Violation of Secure Design Principles

Disclosed Reports

Report Title Vulnerability Type Disclosed By Severity Disclosed on
Broken Link on Ping Identity's Vulnerability Submission Form on Hackerone Violation of Secure Design Principles awararesearcher Low 2021-06-16
No valid SPF record not found Improper Authentication - Generic aravindn No rating 2020-11-16
Stored XSS in Application menu via Home Page Url Cross-site Scripting (XSS) - Stored renniepak Medium 2020-11-16
Session misconfiguration on change password feature at https://apps-staging.pingone.com/myaccount/?environmentId=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx# Violation of Secure Design Principles gujjuboy10x00 Low 2020-11-16
Forbidden access to https://apps-staging.pingone.com but "/packages.json" visible and full path disclosure Improper Access Control - Generic mjigar821 Low 2020-11-16
Session misconfiguration on forget password feature at https://ort-admin.pingone.com Insufficient Session Expiration gujjuboy10x00 Low 2020-11-16
Google Maps API key leaked during device pairing Information Exposure Through Sent Data bug_digger21 Medium 2020-04-29
Internal Hostname disclosure from multiple Apache servers via blank host header method Information Disclosure jackb898 Low 2020-03-12
Server-Side Request Forgery on SAML Application - Import via URL Server-Side Request Forgery (SSRF) ziot Medium 2019-03-26
SaaS admin can modify/delete/get user information. Privilege Escalation rijalrojan High 2019-03-26
CSRF in Inviting users Cross-Site Request Forgery (CSRF) rijalrojan High 2019-03-26