CVE-2022-40725 — PingID Desktop PIN attempt lockout bypass.

CVE-2022-40725

PingID Desktop PIN attempt lockout bypass. PUBLISHED

Description (CNA)

PingID Desktop prior to the latest released version 1.7.4 contains a vulnerability that can be exploited to bypass the maximum PIN attempts permitted before the time-based lockout is activated.

Affected (CNA)

Vendor / product	Versions
Ping Identity / PingID Desktop for Windows	affected 1.7.4 before 1.7.4
Ping Identity / PingID Desktop for macOS	affected 1.7.4 before 1.7.4

CWE

CWE-288

References

https://docs.pingidentity.com/r/en-us/pingid/desktop_app_1.7.4

ADP enrichment

CVE

No English description supplied.

https://docs.pingidentity.com/r/en-us/pingid/desktop_app_1.7.4

CISA-ADP

No English description supplied.

No references supplied.