medium6.6
CVE-2021-41994
A misconfiguration of RSA in PingID iOS app prior to 1.19 is vulnerable to pre-computed dictionary attacks, leading to an offline MFA bypass when using PingID …
Impact
A misconfiguration of RSA in PingID iOS app prior to 1.19 is vulnerable to pre-computed dictionary attacks, leading to an offline MFA bypass when using PingID Windows Login.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pingidentity | Pingid | before 1.19 |
| Pingidentity | Pingid Windows Login | All versions |