PingID Integration for Windows Login vulnerabilities

1 known vulnerability in PingID Integration for Windows Login from Ping Identity. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  PingID Integration for Windows Login: Use of Hard-coded Credentials

  CVE-2022-23724May 4, 2022Ping Identity

  Use of static encryption key material allows forging an authentication token to other users within a tenant organization. MFA may be bypassed by redirecting an authentication flow to a target user. To exploit the vulnerability, must have compromised user crede