High severity7.3NVD Advisory· Published Apr 25, 2023· Updated Jun 17, 2026

CVE-2022-40725

Description

PingID Desktop prior to the latest released version 1.7.4 contains a vulnerability that can be exploited to bypass the maximum PIN attempts permitted before the time-based lockout is activated.

Affected products

Pingidentity/Desktop
cpe:2.3:a:pingidentity:desktop:*:*:*:*:*:*:*:*
Range: <1.7.4
Pingidentity/Pingid Desktopllm-fuzzy3 versions
<1.7.4+ 2 more
- (no CPE)range: <1.7.4
- (no CPE)range: 1.7.4
- (no CPE)range: 1.7.4

Patches

Vulnerability mechanics

References

docs.pingidentity.com/r/en-us/pingid/desktop_app_1.7.4nvdRelease Notes

News mentions

No linked articles in our index yet.

cvss	0.474
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000