PW
Product
PingID Windows Login
6
CVEs
0
On KEV
8.2
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 4Low 0
Watch
Add PingID Windows Login to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-23720 | 8.2 | Jun 30 | PingID Windows Login prior to 2.8 does not alert or halt operation if it has been provisioned with the full permissions PingID properties file Affected: before 2.8 |
| CVE-2022-23718 | 8.1 | Jun 30 | PingID Windows Login prior to 2.8 uses known vulnerable components that can lead to remote code execution Affected: before 2.8 |
| CVE-2022-23719 | 6.4 | Jun 30 | PingID Windows Login prior to 2.8 does not authenticate communication with a local Java service used to capture security key requests Affected: before 2.8 |
| CVE-2021-41992 | 5.6 | Apr 30 | PingID Windows Login RSA cryptographic weakness with possible offline MFA bypass Affected: before 2.7 |
| CVE-2022-23725 | 5.5 | Jun 30 | PingID Windows Login prior to 2.8 does not properly set permissions on the Windows Registry entries used to store sensitive API keys under some circumstances Affected: before 2.8 |
| CVE-2022-23717 | 5.5 | Jun 30 | PingID Windows Login prior to 2.8 denial of service condition Affected: before 2.8 |
Showing 6