CVE-2022-23725: Pingidentity Pingid Integration For Windows Login

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

PingID Windows Login prior to 2.8 does not properly set permissions on the Windows Registry entries used to store sensitive API keys under some circumstances.

Affected products

• Pingidentity Pingid Integration For Windows Login: before 2.8 (fixed in 2.8)

Published 2022-06-30. Last modified 2026-06-17.