Pingidentity Pingid vulnerabilities

• ping identity pingid radius pcv PingFederate PingID Radius PCV Authentication Bypass CVE-2023-39930 7.5 HighOctober 24, 2023
• ping identity pingid radius pcv, pingidentity pingfederate, radius pcv +3 more +5 more Configuration-based MFA Bypass in PingID RADIUS PCV. CVE-2022-40723 6.5 MediumApril 25, 2023
• ping identity pingid adapter for pingfederate, pingidentity pingfederate, ping identity pingfederate (includes pingid adapter) +2 more +4 more Misconfiguration of RSA padding for offline MFA in the PingID Adapter for PingFederate. CVE-2022-40722 7.7 HighApril 25, 2023
• pingidentity pingid integration for windows login, ping identity unspecified +1 more PingID integration for Windows login duplicate username collision. CVE-2022-23721 3.8 LowApril 25, 2023
• ping identity pingid windows login, pingidentity pingid integration for windows login +1 more PingID Windows Login prior to 2.8 does not properly set permissions on the Windows Registry entries used to store sensitive API keys under some circumstances CVE-2022-23725 7.7 HighJune 30, 2022
• ping identity pingid windows login, pingidentity pingid integration for windows login +1 more PingID Windows Login prior to 2.8 does not alert or halt operation if it has been provisioned with the full permissions PingID properties file CVE-2022-23720 7.5 HighJune 30, 2022
• ping identity pingid windows login, pingidentity pingid integration for windows login +1 more PingID Windows Login prior to 2.8 does not authenticate communication with a local Java service used to capture security key requests CVE-2022-23719 7.2 HighJune 30, 2022
• ping identity pingid windows login, pingidentity pingid integration for windows login +1 more PingID Windows Login prior to 2.8 uses known vulnerable components that can lead to remote code execution CVE-2022-23718 7.6 HighJune 30, 2022
• ping identity pingid windows login, pingidentity pingid integration for windows login +1 more PingID Windows Login prior to 2.8 denial of service condition CVE-2022-23717 5.0 MediumJune 30, 2022
• ping identity pingid mac login, pingidentity pingid integration for mac login +1 more PingID Mac Login prior to 1.1 vulnerable to pre-computed dictionary attacks CVE-2021-41995 7.7 HighJune 30, 2022
• ping identity pingid integration for windows login PingID Integration for Windows Login MFA Bypass CVE-2022-23724 6.4 MediumMay 4, 2022
• ping identity pingid desktop PingID Desktop encryption libraries misconfiguration can lead to sensitive data exposure CVE-2021-42001 8.0 HighApril 30, 2022
• pingidentity pingid, pingid windows login, ping identity pingid mobile application +2 more PingID iOS mobile application prior to 1.19 vulnerable to pre-computed dictionary attacks CVE-2021-41994 6.6 MediumApril 30, 2022
• pingidentity pingid, pingid windows login, ping identity pingid mobile application +2 more PingID Android mobile application prior to 1.19 vulnerable to pre-computed dictionary attacks CVE-2021-41993 6.6 MediumApril 30, 2022
• ping identity pingid windows login, pingidentity pingid integration for windows login +1 more PingID Windows Login RSA cryptographic weakness with possible offline MFA bypass CVE-2021-41992 7.7 HighApril 30, 2022
• pingidentity pingid integration for windows login PingID Integration for Windows Login before 2.4.2 allows local users to gain privileges by... CVE-2020-25826 7.8 HighSeptember 23, 2020
• pingidentity pingid ssh integration Ping Identity PingID SSH before 4.0.14 contains a heap buffer overflow in PingID-enrolled servers... CVE-2020-10654 9.8 CriticalMay 13, 2020