CVSS 3.1
5.5 mediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NCVE-2022-23725
Medium (5.5) in pingidentity pingid integration for windows login. EPSS 0.2% chance of exploitation in the next 30 days.
PingID Windows Login prior to 2.8 does not properly set permissions on the Windows Registry entries used to store sensitive API keys under some circumstances.
Severity
- EPSS
- 0.2% chance of exploitation in the next 30 days; higher than 12% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-732, CWE-288, CWE-522
- Published
- Modified
- Record from
- the NVD, synced
Affected
- pingidentity:pingid_integration_for_windows_login