Read the docs

Ping Identity

Records59All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical9CVSS 9.0–10.0
CVSS high22CVSS 7.0–8.9

Exploited now

Ping Identity records in CISA KEV

No Ping Identity vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Pingfederate 14 records MEDIUM Pingid Integration For Windows Login 9 records LOW Pingid 2 records LOW Pingid Integration Kit 2 records LOW Pingid Windows Login 2 records LOW Pingone Mfa Integration Kit 2 records LOW Agentless Integration Kit 1 record LOW Desktop 1 record LOW

Records

1 record in Desktop · all components

TI-2022-19359 CVE-2022-40725 · GHSA-6mjq-9p26-vg33

PingID Desktop PIN attempt lockout bypass.

Priority LOW 31

PingID Desktop prior to the latest released version 1.7.4 contains a vulnerability that can be exploited to bypass the maximum PIN attempts permitted before the time-based lockout is activated.

CVSS 3.1HIGH 7.3 Local Low privileges No interaction EPSS 0.00187 Published 2023-04-25 Fixed in 1.7.4 CWE-288
Open these records in search →