NetSight
high7.7

CVE-2022-23725

PingID Windows Login prior to 2.8 does not properly set permissions on the Windows Registry entries used to store sensitive API keys under some circumstances.

Impact

PingID Windows Login prior to 2.8 does not properly set permissions on the Windows Registry entries used to store sensitive API keys under some circumstances.

Affected products

VendorProductAffected versions
PingidentityPingid Integration For Windows Login
before 2.8

Weakness classification

References