CVE-2022-23718

CVE-2022-23718 is a remote code execution vulnerability affecting PingID Windows Login versions prior to 2.8, stemming from the use of known vulnerable components. An attacker with a sophisticated man-in-the-middle position or control over Ping Identity web servers could deliver malicious code, which would then execute with SYSTEM privileges. This vulnerability carries a high CVSS score of 8.1 due to its network attack vector, high impact on confidentiality, integrity, and availability, but also a high attack complexity. Currently, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.