CVE-2022-23717

Name of the Vulnerable Software and Affected Versions PingID Windows Login versions prior to 2.8

Description The issue is related to a denial of service condition that can occur on local machines when using offline security keys as part of the authentication process. This is due to incorrect clearance or release of resources in the multi-factor authentication (MFA) application. Exploitation of this issue can allow an attacker to cause a denial of service.

Recommendations For versions prior to 2.8, update to version 2.8 or later to resolve the issue. As a temporary workaround, consider avoiding the use of offline security keys as part of the authentication process until a patch is available. Restrict access to the authentication module to minimize the risk of exploitation.