Unrated severityNVD Advisory· Published Apr 25, 2023· Updated Feb 4, 2025

PingID Desktop PIN attempt lockout bypass.

CVE-2022-40725

Description

PingID Desktop prior to the latest released version 1.7.4 contains a vulnerability that can be exploited to bypass the maximum PIN attempts permitted before the time-based lockout is activated.

Affected products

Pingidentity/PingID Desktopllm-create3 versions
<1.7.4+ 2 more
- (no CPE)range: <1.7.4
- (no CPE)range: 1.7.4
- (no CPE)range: 1.7.4

Patches

Vulnerability mechanics

References

docs.pingidentity.com/r/en-us/pingid/desktop_app_1.7.4mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000