CVE-2021-41994

A misconfiguration of RSA in PingID iOS app prior to 1.19 is vulnerable to pre-computed dictionary attacks, leading to an offline MFA bypass when using PingID Windows Login.
Configurations

Configuration 1

cpe:2.3:a:pingidentity:pingid_windows_login:-:*:*:*:*:*:*:*
cpe:2.3:a:pingidentity:pingid:*:*:*:*:*:iphone_os:*:*

Information

Published : 2022-04-30 10:15

Updated : 2022-05-10 05:48


NVD link : CVE-2021-41994

Mitre link : CVE-2021-41994

Products Affected
No products.
CWE