Ping Identity PingID Windows Login

• CVE-2022-23725 High 7.7 PingID Windows Login prior to 2.8 does not properly set permissions on the Windows Registry entries used to store sensitive API keys under some circumstances 0.2%
• CVE-2022-23720 High 7.5 PingID Windows Login prior to 2.8 does not alert or halt operation if it has been provisioned with the full permissions PingID properties file 0.2%
• CVE-2022-23719 High 7.2 PingID Windows Login prior to 2.8 does not authenticate communication with a local Java service used to capture security key requests 0.3%
• CVE-2022-23718 High 7.6 PingID Windows Login prior to 2.8 uses known vulnerable components that can lead to remote code execution 2.1%
• CVE-2022-23717 Medium 5.0 PingID Windows Login prior to 2.8 denial of service condition 0.2%
• CVE-2021-41992 High 7.7 PingID Windows Login RSA cryptographic weakness with possible offline MFA bypass 0.5%