What’s Vulnerable › Products

Ping Identity PingID Windows Login vulnerabilities

9 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Check whether your Ping Identity PingID Windows Login version is affected

Latest Ping Identity PingID Windows Login vulnerabilities

• CVE-2022-23721 — PingID integration for Windows login duplicate username collision. (CVSS 3.3)
• CVE-2022-23725 — PingID Windows Login prior to 2.8 does not properly set permissions on the Windows Registry entries used to store sensitive API keys under some circumstances (CVSS 5.5)
• CVE-2022-23720 — PingID Windows Login prior to 2.8 does not alert or halt operation if it has been provisioned with the full permissions PingID properties file (CVSS 8.2)
• CVE-2022-23719 — PingID Windows Login prior to 2.8 does not authenticate communication with a local Java service used to capture security key requests (CVSS 6.4)
• CVE-2022-23718 — PingID Windows Login prior to 2.8 uses known vulnerable components that can lead to remote code execution (CVSS 8.1)
• CVE-2022-23717 — PingID Windows Login prior to 2.8 denial of service condition (CVSS 5.5)
• CVE-2022-23724 — PingID Integration for Windows Login MFA Bypass (CVSS 8.1)
• CVE-2021-41992 — PingID Windows Login RSA cryptographic weakness with possible offline MFA bypass (CVSS 5.6)
• CVE-2020-25826 — (CVSS 7.8)