← Database

CVE-2022-40725

HIGH CVSS: 7.3 Published: 2023-04-25 Modified: 2026-06-17

Description

PingID Desktop prior to the latest released version 1.7.4 contains a vulnerability that can be exploited to bypass the maximum PIN attempts permitted before the time-based lockout is activated.

Affected Platforms

Pingidentity Desktop

Weakness Type

CWE-288, CWE-306

References