CVE-2022-23717: Pingidentity Pingid Integration For Windows Login

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

PingID Windows Login prior to 2.8 is vulnerable to a denial of service condition on local machines when combined with using offline security keys as part of authentication.

Affected products

• Pingidentity Pingid Integration For Windows Login: before 2.8 (fixed in 2.8)

Published 2022-06-30. Last modified 2026-06-17.