CVE-2021-41992

Description

A misconfiguration of RSA in PingID Windows Login prior to 2.7 is vulnerable to pre-computed dictionary attacks, leading to an offline MFA bypass.

Affected Platforms

Weakness Type

CWE-288, CWE-310, CWE-287

References

• https://docs.pingidentity.com/bundle/pingid/page/klc1641469599716.html
• https://www.pingidentity.com/en/resources/downloads/pingid.html
• https://docs.pingidentity.com/bundle/pingid/page/klc1641469599716.html
• https://www.pingidentity.com/en/resources/downloads/pingid.html