Vulnerability Details CVE-2021-41994
A misconfiguration of RSA in PingID iOS app prior to 1.19 is vulnerable to pre-computed dictionary attacks, leading to an offline MFA bypass when using PingID Windows Login.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 3.7%
CVSS Severity
CVSS v3 Score 6.6
CVSS v2 Score 1.9
References
Products affected by CVE-2021-41994
-
cpe:2.3:a:pingidentity:pingid:*
-
cpe:2.3:a:pingidentity:pingid_windows_login:-