5.5
CVE-2022-23717
- EPSS 0.22%
- Veröffentlicht 30.06.2022 20:15:08
- Zuletzt bearbeitet 21.11.2024 06:49:10
- Quelle responsible-disclosure@pingide
- CVE-Watchlists
- Unerledigt
LoginPingID Windows Login prior to 2.8 denial of service condition
PingID Windows Login prior to 2.8 is vulnerable to a denial of service condition on local machines when combined with using offline security keys as part of authentication.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Pingidentity ≫ Pingid Integration For Windows Login Version < 2.8
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.22% | 0.128 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 5.5 | 1.8 | 3.6 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
|
| nvd@nist.gov | 4.9 | 3.9 | 6.9 |
AV:L/AC:L/Au:N/C:N/I:N/A:C
|
| responsible-disclosure@pingidentity.com | 5 | 0.6 | 4 |
CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:N/I:N/A:H
|
CWE-404 Improper Resource Shutdown or Release
The product does not release or incorrectly releases a resource before it is made available for re-use.
https://www.pingidentity.com/en/resources/downloads/pingid.html
https://docs.pingidentity.com/bundle/pingid/page/zhy1653552428545.html