CVE-2022-23721

Katalog CVE

CVSS 3.3 · Low EPSS 0,22%

Kerentanan Use of Multiple Resources with Duplicate Identifier pada pingidentity pingid integration for windows login. Skor CVSS 3.1 3.3 (Low) menurut NVD.

Deskripsi (NVD)

PingID integration for Windows login prior to 2.9 does not handle duplicate usernames, which can lead to a username collision when two people with the same username are provisioned onto the same machine at different times.

Rincian

Terbit di NVD

25 April 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

3.3 (Low), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-694: Use of Multiple Resources with Duplicate Identifier
CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

EPSS (30 hari)

0,22% peluang dieksploitasi; lebih tinggi dari 11,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://docs.pingidentity.com/r/en-us/pingid/davinci_pingid_windows_login_relnotes_2.9 release notes