← voltar
CVE-2021-41994

PingID iOS mobile application prior to 1.19 vulnerable to pre-computed dictionary attacks

CVSS 6.6 MEDIUMEPSS 0.2%CWE-310
A misconfiguration of RSA in PingID iOS app prior to 1.19 is vulnerable to pre-computed dictionary attacks, leading to an offline MFA bypass when using PingID Windows Login.
CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N
Produtos afetados
Ping Identity · PingID Mobile Application

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
https://docs.pingidentity.com/bundle/pingid/page/ejd1642076304199.htmlhttps://www.pingidentity.com/en/resources/downloads/pingid.html