CVE-2021-41993

Publication date

2022-04-30 21:15:21

Family

Ping Identity

State

PUBLISHED

Description

A misconfiguration of RSA in PingID Android app prior to 1.19 is vulnerable to pre-computed dictionary attacks, leading to an offline MFA bypass when using PingID Windows Login.