Pingid Integration For Windows Login

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:pingidentity:pingid_integration_for_windows_login:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPingidentity (f56e02bf-5fbe-54aa-9dfd-2b764962bd7c)
ProductPingid Integration For Windows Login (c2326fda-88e8-5b60-ae86-69f1561ed3b0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-23725 vulnerable 2026-06-08 05:40:58.300904 PingID Windows Login prior to 2.8 does not properly set permissions on the Windows Registry entries used to store sensitive API keys under some circumstances
HIGH (7.7)
PingID Windows Login prior to 2.8 does not properly set permissions on the Windows Registry entries used to store sensitive API keys under some circumstances.
Published: 2022-06-30T19:25:46.000Z
Updated: 2024-08-03T03:51:46.172Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-23724 vulnerable 2026-06-08 05:40:58.300481 PingID Integration for Windows Login MFA Bypass
MEDIUM (6.4)
Use of static encryption key material allows forging an authentication token to other users within a tenant organization. MFA may be bypassed by redirecting an authentication flow to a target user. To exploit the vulnerability, must have compromised user credentials.
Published: 2022-05-04T16:30:11.000Z
Updated: 2024-08-03T03:51:46.013Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-23721 vulnerable 2026-06-08 05:40:58.290370 PingID integration for Windows login duplicate username collision.
LOW (3.8)
PingID integration for Windows login prior to 2.9 does not handle duplicate usernames, which can lead to a username collision when two people with the same username are provisioned onto the same machine at different times.
Published: 2023-04-25T00:00:00.000Z
Updated: 2025-02-04T14:49:49.619Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-23720 vulnerable 2026-06-08 05:40:58.288626 PingID Windows Login prior to 2.8 does not alert or halt operation if it has been provisioned with the full permissions PingID properties file
HIGH (7.5)
PingID Windows Login prior to 2.8 does not alert or halt operation if it has been provisioned with the full permissions PingID properties file. An IT administrator could mistakenly deploy administrator privileged PingID API credentials, such as those typically used by PingFederate, into PingID Windows Login user endpoints. Using sensitive full permissions properties file outside of a privileged trust boundary leads to an increased risk of exposure or discovery, and an attacker could leverage these credentials to perform administrative actions against PingID APIs or endpoints.
Published: 2022-06-30T19:25:41.000Z
Updated: 2024-08-03T03:51:45.962Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-23719 vulnerable 2026-06-08 05:40:58.288262 PingID Windows Login prior to 2.8 does not authenticate communication with a local Java service used to capture security key requests
HIGH (7.2)
PingID Windows Login prior to 2.8 does not authenticate communication with a local Java service used to capture security key requests. An attacker with the ability to execute code on the target machine maybe able to exploit and spoof the local Java service using multiple attack vectors. A successful attack can lead to code executed as SYSTEM by the PingID Windows Login application, or even a denial of service for offline security key authentication.
Published: 2022-06-30T19:25:35.000Z
Updated: 2024-08-03T03:51:46.025Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-23718 vulnerable 2026-06-08 05:40:58.287861 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-23717 vulnerable 2026-06-08 05:40:58.287383 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-41992 vulnerable 2026-06-08 05:35:21.345891 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-25826 vulnerable 2026-06-08 05:23:49.480713 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.