CVE-2022-23721 | BDVDB-2026-200939 Detail
Ping Identity
Description#
PingID integration for Windows login prior to 2.9 does not handle duplicate usernames, which can lead to a username collision when two people with the same username are provisioned onto the same machine at different times.
Impact#
Per CVSS v3.1: confidentiality impact none, integrity impact none, availability impact low. Attack vector: local.
Weaknesses#
- CWE-694 Use of Multiple Resources with Duplicate Identifier
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.