Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Release: Ping Identity PingID Windows Login 2.8 Clear all filters
TI-2022-07777 CVE-2022-23725 · GHSA-j3rf-gq9q-v8hx

Authentication bypass in PingID Windows Login

Priority LOW 33

PingID Windows Login prior to 2.8 does not properly set permissions on the Windows Registry entries used to store sensitive API keys under some circumstances.

CVSS 3.1HIGH 7.7 Local Low privileges No interaction EPSS 0.00219 Published 2022-06-30 Fixed in 2.8 CWE-288
TI-2022-07772 CVE-2022-23720 · GHSA-79g3-7482-2jvc

Authentication bypass in PingID Windows Login

Priority LOW 35

PingID Windows Login prior to 2.8 does not alert or halt operation if it has been provisioned with the full permissions PingID properties file.

CVSS 3.1HIGH 8.2 Local High privileges No interaction EPSS 0.00248 Published 2022-06-30 Fixed in 2.8 CWE-288
TI-2022-07771 CVE-2022-23719 · GHSA-54r4-ppj3-fq8f

Authentication bypass in PingID Windows Login

Priority LOW 31

PingID Windows Login prior to 2.8 does not authenticate communication with a local Java service used to capture security key requests.

CVSS 3.1HIGH 7.2 Local High privileges User interaction EPSS 0.00292 Published 2022-06-30 Fixed in 2.8 CWE-288
TI-2022-07769 CVE-2022-23717 · GHSA-5wm5-xf8r-2r7j

PingID Windows Login prior to 2.8 denial of service condition

Priority LOW 24

PingID Windows Login prior to 2.8 is vulnerable to a denial of service condition on local machines when combined with using offline security keys as part of authentication.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00238 Published 2022-06-30 Fixed in 2.8 CWE-404