PingID Windows Login vulnerabilities

2 known vulnerabilities in PingID Windows Login from Ping Identity. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.2 High severity

  PingID Windows Login: Improper Privilege Management

  CVE-2022-23720Jun 30, 2022Ping Identity

  PingID Windows Login prior to 2.8 does not alert or halt operation if it has been provisioned with the full permissions PingID properties file. An IT administrator could mistakenly deploy administrator privileged PingID API credentials, such as those typically

• 8.1 High severity

  PingID Windows Login prior to 2.8 uses known vulnerable components that can lead to remote…

  CVE-2022-23718Jun 30, 2022Ping IdentityEPSS 2.14%

  PingID Windows Login prior to 2.8 uses known vulnerable components that can lead to remote code execution. An attacker capable of achieving a sophisticated man-in-the-middle position, or to compromise Ping Identity web servers, could deliver malicious code tha