Support Us — Your donation helps us keep running

Goal: 1000 CNY，Raised: 1000 CNY

100.0%
Donate Now

PingID Windows Login — Vulnerabilities & Security Advisories 6

All 6 CVE vulnerabilities found in PingID Windows Login, with AI-generated Chinese analysis, references, and POCs.

Vendor: Ping Identity

CVE IDTitleCVSSSeverityPaused
CVE-2022-23725 PingID Windows Login prior to 2.8 does not properly set permissions on the Windows Registry entries used to store sensitive API keys under some circumstances CWE-522 7.7 High2022-06-30
CVE-2022-23720 PingID Windows Login prior to 2.8 does not alert or halt operation if it has been provisioned with the full permissions PingID properties file CWE-648 7.5 High2022-06-30
CVE-2022-23719 PingID Windows Login prior to 2.8 does not authenticate communication with a local Java service used to capture security key requests CWE-310 7.2 High2022-06-30
CVE-2022-23718 PingID Windows Login prior to 2.8 uses known vulnerable components that can lead to remote code execution CWE-1352 7.6 High2022-06-30
CVE-2022-23717 PingID Windows Login prior to 2.8 denial of service condition CWE-404 5.0 Medium2022-06-30
CVE-2021-41992 PingID Windows Login RSA cryptographic weakness with possible offline MFA bypass CWE-310 7.7 High2022-04-30

All 6 known CVE vulnerabilities affecting PingID Windows Login with full Chinese analysis, references, and POCs where available.