PingID Integration for Windows Login before 2.4.2 allows local users to gain privileges by modifying CefSharp.BrowserSubprocess.exe.
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HPingidentity Pingid Integration For Windows Login
APPPingidentity< 2.4.2
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
Related vulnerabilities
CVE-2022-23725HIGH7.7ten sam produkt
PingID Windows Login prior to 2.8 does not properly set permissions on the Windows Registry entries used to st...
CVE-2022-23718HIGH7.6ten sam produkt
PingID Windows Login prior to 2.8 uses known vulnerable components that can lead to remote code execution. An ...
CVE-2022-23719HIGH7.2ten sam produkt
PingID Windows Login prior to 2.8 does not authenticate communication with a local Java service used to captur...
CVE-2022-23720HIGH7.5ten sam produkt
PingID Windows Login prior to 2.8 does not alert or halt operation if it has been provisioned with the full pe...
CVE-2021-41992HIGH7.7ten sam produkt
A misconfiguration of RSA in PingID Windows Login prior to 2.7 is vulnerable to pre-computed dictionary attack...