← Database

CVE-2021-41993

MEDIUM CVSS: 6.6 Published: 2022-04-30 Modified: 2026-06-17

Description

A misconfiguration of RSA in PingID Android app prior to 1.19 is vulnerable to pre-computed dictionary attacks, leading to an offline MFA bypass when using PingID Windows Login.

Affected Platforms

Pingidentity PingidPingidentity Pingid Windows Login

Weakness Type

CWE-310, CWE-330

References