High · 7.7 CVE-2021-41992 EUVD-2021-28982GHSA-r2cf-3rwp-j3r7

PingID Windows Login RSA cryptographic weakness with possible offline MFA bypass

Published Apr 30, 2022 · Updated Aug 4, 2024 · Assigned by Ping Identity

Description

A misconfiguration of RSA in PingID Windows Login prior to 2.7 is vulnerable to pre-computed dictionary attacks, leading to an offline MFA bypass.

Vendor	Product	Affected	Fixed
Ping Identity	PingID Windows Login	unspecified – < 2.7	2.7