Unrated severityNVD Advisory· Published Apr 30, 2022· Updated Aug 4, 2024
PingID Android mobile application prior to 1.19 vulnerable to pre-computed dictionary attacks
CVE-2021-41993
Description
A misconfiguration of RSA in PingID Android app prior to 1.19 is vulnerable to pre-computed dictionary attacks, leading to an offline MFA bypass when using PingID Windows Login.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: <1.19
- Ping Identity/PingID Mobile Applicationv5Range: unspecified
Patches
Vulnerability mechanics
References
2- docs.pingidentity.com/bundle/pingid/page/zvy1641459415679.htmlmitrex_refsource_MISC
- www.pingidentity.com/en/resources/downloads/pingid.htmlmitrex_refsource_MISC
News mentions
0No linked articles in our index yet.