PingID Windows Login prior to 2.8 denial of service condition
CVE-2022-23717

5MEDIUM

Key Information:

Vendor: Ping Identity
Status: Pingid Windows Login
Vendor: CVE Published:; 30 June 2022

🔔 Create Ping Identity Vulnerability Alert

What is CVE-2022-23717?

PingID Windows Login prior to 2.8 is vulnerable to a denial of service condition on local machines when combined with using offline security keys as part of authentication.

Affected Version(s)

PingID Windows Login Windows < 2.8

References

https://www.pingidentity.com/en/resources/downloads/pingi...

x_refsource_MISC

https://docs.pingidentity.com/bundle/pingid/page/zhy16535...

x_refsource_MISC

CVSS V3.1

Score:

Severity:

MEDIUM

Confidentiality:

None

Integrity:

None

Availability:

None

Attack Vector:

Local

Attack Complexity:

High

Privileges Required:

High

User Interaction:

Required

Scope:

Changed

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jun 30, 2022
Vulnerability Reserved
Jan 19, 2022

Credit

Ping Identity credits The Commonwealth Bank of Australia for the discovery of this vulnerability.

JSON