PI
Product
Pingid Integration For Windows Login
9
CVEs
0
On KEV
8.2
Max CVSS
0
New 30D
Severity mix
Critical 0High 4Medium 4Low 1
Watch
Add Pingid Integration For Windows Login to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-23720 | 8.2 | Jun 30 | PingID Windows Login prior to 2.8 does not alert or halt operation if it has been provisioned with the full permissions PingID properties file Affected: before 2.8 |
| CVE-2022-23718 | 8.1 | Jun 30 | PingID Windows Login prior to 2.8 uses known vulnerable components that can lead to remote code execution Affected: before 2.8 |
| CVE-2022-23724 | 8.1 | May 4 | PingID Integration for Windows Login MFA Bypass Affected: before 2.4.2 |
| CVE-2020-25826 | 7.8 | Sep 23 | PingID Integration for Windows Login before 2.4.2 allows local users to gain privileges by modifying CefSharp.BrowserSubprocess.exe Affected: before 2.4.2 |
| CVE-2022-23719 | 6.4 | Jun 30 | PingID Windows Login prior to 2.8 does not authenticate communication with a local Java service used to capture security key requests Affected: before 2.8 |
| CVE-2021-41992 | 5.6 | Apr 30 | PingID Windows Login RSA cryptographic weakness with possible offline MFA bypass Affected: before 2.7 |
| CVE-2022-23725 | 5.5 | Jun 30 | PingID Windows Login prior to 2.8 does not properly set permissions on the Windows Registry entries used to store sensitive API keys under some circumstances Affected: before 2.8 |
| CVE-2022-23717 | 5.5 | Jun 30 | PingID Windows Login prior to 2.8 denial of service condition Affected: before 2.8 |
| CVE-2022-23721 | 3.3 | Apr 25 | PingID integration for Windows login duplicate username collision. Affected: before 2.9 |
Showing 9