CVE-2021-41995

Description

A misconfiguration of RSA in PingID Mac Login prior to 1.1 is vulnerable to pre-computed dictionary attacks, leading to an offline MFA bypass.

Affected Platforms

Weakness Type

CWE-288, CWE-310, CWE-287

References

• https://docs.pingidentity.com/bundle/pingid/page/hnh1653583508549.html
• https://www.pingidentity.com/en/resources/downloads/pingid.html
• https://docs.pingidentity.com/bundle/pingid/page/hnh1653583508549.html
• https://www.pingidentity.com/en/resources/downloads/pingid.html