Approved changes feed: RSS · Atom

cpe:2.3:a:ping_identity:pingid_integration_for_windows_login:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPing Identity (6d158c0c-35d7-577e-9df0-1f89137d9677)
ProductPingid Integration For Windows Login (a84eaba4-8db7-5b60-8c78-e8c7e7838ab5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-23724 vulnerable 2026-06-03 14:46:28.166593 PingID Integration for Windows Login MFA Bypass
MEDIUM (6.4)
Use of static encryption key material allows forging an authentication token to other users within a tenant organization. MFA may be bypassed by redirecting an authentication flow to a target user. To exploit the vulnerability, must have compromised user credentials.
Published: 2022-05-04T16:30:11.000Z
Updated: 2024-08-03T03:51:46.013Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.