CVE-2021-42001highCWE-310

CVE-2021-42001: high-severity vulnerability in PingID Desktop

PingID Desktop encryption libraries misconfiguration can lead to sensitive data exposure

Published · Updated

Follow this CVE+ Monitor PingID Desktop

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8epss 0.5%
PingID Desktop prior to 1.7.3 has a misconfiguration in the encryption libraries which can lead to sensitive data exposure. An attacker capable of exploiting this vulnerability may be able to successfully complete an MFA challenge via OTP.
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Affected products
Ping Identity · PingID Desktop