PingID Windows Login

6 results · Feed

• High 7.7
  CVE-2022-23725

  PingID Windows Login prior to 2.8 does not properly set permissions on the Windows Registry entries used to store sensitive API keys under some circumstances

  PingID Windows Login prior to 2.8 does not properly set permissions on the Windows Registry entries used to store sensitive API keys under some circumstances.

  Ping Identity PingID Windows Login Windows
  Jun 30, 2022
• High 7.5
  CVE-2022-23720

  PingID Windows Login prior to 2.8 does not alert or halt operation if it has been provisioned with the full permissions PingID properties file

  PingID Windows Login prior to 2.8 does not alert or halt operation if it has been provisioned with the full permissions PingID properties file. An IT administrator could mistakenly deploy administrator privileged PingID API credentials, such as those typicall…

  Ping Identity PingID Windows Login Windows
  Jun 30, 2022
• High 7.2
  CVE-2022-23719

  PingID Windows Login prior to 2.8 does not authenticate communication with a local Java service used to capture security key requests

  PingID Windows Login prior to 2.8 does not authenticate communication with a local Java service used to capture security key requests. An attacker with the ability to execute code on the target machine maybe able to exploit and spoof the local Java service us…

  Ping Identity PingID Windows Login Windows
  Jun 30, 2022
• High 7.6
  CVE-2022-23718

  PingID Windows Login prior to 2.8 uses known vulnerable components that can lead to remote code execution

  PingID Windows Login prior to 2.8 uses known vulnerable components that can lead to remote code execution. An attacker capable of achieving a sophisticated man-in-the-middle position, or to compromise Ping Identity web servers, could deliver malicious code th…

  Ping Identity PingID Windows Login Windows
  Jun 30, 2022
• Medium 5.0
  CVE-2022-23717

  PingID Windows Login prior to 2.8 denial of service condition

  PingID Windows Login prior to 2.8 is vulnerable to a denial of service condition on local machines when combined with using offline security keys as part of authentication.

  Ping Identity PingID Windows Login Windows
  Jun 30, 2022
• High 7.7
  CVE-2021-41992

  PingID Windows Login RSA cryptographic weakness with possible offline MFA bypass

  A misconfiguration of RSA in PingID Windows Login prior to 2.7 is vulnerable to pre-computed dictionary attacks, leading to an offline MFA bypass.

  Ping Identity PingID Windows Login Windows
  Apr 30, 2022