high7.7
CVE-2022-23725
PingID Windows Login prior to 2.8 does not properly set permissions on the Windows Registry entries used to store sensitive API keys under some circumstances.
Impact
PingID Windows Login prior to 2.8 does not properly set permissions on the Windows Registry entries used to store sensitive API keys under some circumstances.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pingidentity | Pingid Integration For Windows Login | before 2.8 |