PI
Product
Pingid Integration For Windows Login
9
CVEs
0
On KEV
8.2
Max CVSS
0
New 30D
Severity mix
Critical 0High 4Medium 4Low 1
Watch
Add Pingid Integration For Windows Login to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-23719 | 6.4 | Jun 30 | PingID Windows Login prior to 2.8 does not authenticate communication with a local Java service used to capture security key requests Affected: before 2.8 |
| CVE-2021-41992 | 5.6 | Apr 30 | A misconfiguration of RSA in PingID Windows Login prior to 2.7 is vulnerable to pre-computed dictionary attacks, leading to an offline MFA bypass Affected: before 2.7 |
| CVE-2022-23725 | 5.5 | Jun 30 | PingID Windows Login prior to 2.8 does not properly set permissions on the Windows Registry entries used to store sensitive API keys under some circumstances Affected: before 2.8 |
| CVE-2022-23717 | 5.5 | Jun 30 | PingID Windows Login prior to 2.8 denial of service condition Affected: before 2.8 |
Showing 4