Description
A misconfiguration of RSA in PingID Android app prior to 1.19 is vulnerable to pre-computed dictionary attacks, leading to an offline MFA bypass when using PingID Windows Login.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Ping Identity | PingID Mobile Application | unspecified – < 1.19 | 1.19 |