Design/Logic Flaw

2023-04-2519:15:00

PRIOn knowledge base

www.prio-n.com

pingid

desktop

vulnerability

bypass

pin limit

nvd

6.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.2%

JSON

PingID Desktop prior to the latest released version 1.7.4 contains a vulnerability that can be exploited to bypass the maximum PIN attempts permitted before the time-based lockout is activated.

CPENameOperatorVersion
desktoplt1.7.4

CPE	Name	Operator	Version
	desktop	lt	1.7.4

References

docs.pingidentity.com/r/en-us/pingid/desktop_app_1.7.4