CVE-2022-23725

—

CVSS 3.1

5.5 medium

EPSS

<1%p12

Published

Jun 30, 2022 (Jun 30, 2022)

Modified

Jun 17, 2026

Description

PingID Windows Login prior to 2.8 does not properly set permissions on the Windows Registry entries used to store sensitive API keys under some circumstances.

Vendors: pingidentity
Products: pingid integration for windows login
Weakness: CWE-288, CWE-522, CWE-732
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.