High · 7.7 CVE-2022-23725 EUVD-2022-28661GHSA-j3rf-gq9q-v8hx

PingID Windows Login prior to 2.8 does not properly set permissions on the Windows Registry entries used to store sensitive API keys under some circumstances

Published Jun 30, 2022 · Updated Aug 3, 2024 · Assigned by Ping Identity

Vendor: Ping Identity Product: PingID Windows Login Platform: Windows

Description

PingID Windows Login prior to 2.8 does not properly set permissions on the Windows Registry entries used to store sensitive API keys under some circumstances.

Affected products

Vendor	Product	Affected	Fixed
Ping Identity	PingID Windows Login	unspecified – < 2.8	2.8

References

https://www.pingidentity.com/en/resources/downloads/pingid.html
https://docs.pingidentity.com/bundle/pingid/page/zhy1653552428545.html