High · 7.7 CVE-2021-41995 EUVD-2021-28985GHSA-cvx4-2j8v-rqmj

PingID Mac Login prior to 1.1 vulnerable to pre-computed dictionary attacks

Published Jun 30, 2022 · Updated Aug 4, 2024 · Assigned by Ping Identity

Description

A misconfiguration of RSA in PingID Mac Login prior to 1.1 is vulnerable to pre-computed dictionary attacks, leading to an offline MFA bypass.

Vendor	Product	Affected	Fixed
Ping Identity	PingID Mac Login	unspecified – < 1.1	1.1