CVE-2021-41994 in PingID

الملخص

بحسب MITRE • 01/05/2022

A misconfiguration of RSA in PingID iOS app prior to 1.19 is vulnerable to pre-computed dictionary attacks, leading to an offline MFA bypass when using PingID Windows Login.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• مسؤول: Ping Identity Corporation
• حجز: 04/10/2021
• إفشاء: 01/05/2022
• الاعتدال: تمت الموافقة
• إدخال: VDB-198755
• CPE: جاهز
• CWE: CWE-310 (مؤكد)
• CVSS: 6.6 (CNA)
• EPSS: 0.00236
• KEV: لا
• النشاطات: منخفض جدًا
• القطاع: Homeoffice

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2021-41994
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2021-41994
• CVE Details: https://www.cvedetails.com/cve/CVE-2021-41994/