PingID Windows Login before 2.8 uses known vulnerable components that can lead to remote code execution. An attacker capable of achieving a sophisticated man-in-the-middle position, or to compromise Ping Identity web servers, could deliver malicious code that would be executed as SYSTEM by the PingID Windows Login application.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
pingidentity pingid integration for windows login |
Vulmon