← Database

CVE-2022-23725

HIGH CVSS: 7.7 Published: 2022-06-30 Modified: 2026-06-17

Description

PingID Windows Login prior to 2.8 does not properly set permissions on the Windows Registry entries used to store sensitive API keys under some circumstances.

Affected Platforms

Pingidentity Pingid Integration For Windows Login

Weakness Type

CWE-288, CWE-522, CWE-732

References