Lucene search
HistoryApr 25, 2023 - 7:15 p.m.
CVE-2022-40725
cve-2022-40725
pingid
desktop
vulnerability
bypass
pin lockout
6.1 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
0.0004 Low
EPSS
Percentile
9.2%
PingID Desktop prior to the latest released version 1.7.4 contains a vulnerability that can be exploited to bypass the maximum PIN attempts permitted before the time-based lockout is activated.
Affected configurations
Node
pingidentitydesktopRange<1.7.4
Related
cve
cve
CVE-2022-40725
2023-04-25 19:15:10
cvelist
cvelist
CVE-2022-40725 PingID Desktop PIN attempt lockout bypass.
2023-04-25 00:00:00
prion
prion
Design/Logic Flaw
2023-04-25 19:15:00
6.1 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
0.0004 Low
EPSS
Percentile
9.2%
Related for NVD:CVE-2022-40725