PingID integration for Windows login prior to 2.9 does not handle duplicate usernames, which can lead to a username collision when two people with the same username are provisioned onto the same machine at different times.
References
| Link | Resource |
|---|---|
| https://docs.pingidentity.com/r/en-us/pingid/davinci_pingid_windows_login_relnotes_2.9 | Release Notes |
| https://docs.pingidentity.com/r/en-us/pingid/davinci_pingid_windows_login_relnotes_2.9 | Release Notes |
Configurations
History
21 Nov 2024, 06:49
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://docs.pingidentity.com/r/en-us/pingid/davinci_pingid_windows_login_relnotes_2.9 - Release Notes | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 3.8 |
04 May 2023, 19:39
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:pingidentity:pingid_integration_for_windows_login:*:*:*:*:*:*:*:* | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 3.3 |
| CWE | CWE-74 | |
| References | (MISC) https://docs.pingidentity.com/r/en-us/pingid/davinci_pingid_windows_login_relnotes_2.9 - Release Notes |
25 Apr 2023, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-04-25 19:15
Updated : 2024-11-21 06:49
NVD link : CVE-2022-23721
Mitre link : CVE-2022-23721
CVE.ORG link : CVE-2022-23721
JSON object : View
Products Affected
pingidentity
- pingid_integration_for_windows_login