What is the vulnerability ID for this PingID iOS app vulnerability?

The vulnerability ID is CVE-2021-41994.

What is the risk severity of CVE-2021-41994?

The risk severity of CVE-2021-41994 is medium with a severity value of 4.8.

Which software versions of the PingID iOS app are affected by CVE-2021-41994?

The versions affected are prior to 1.19.

Where can I find more information and resources about this vulnerability?

You can find more information and resources about this vulnerability in the PingID documentation and downloads page at the following links: [link1](https://docs.pingidentity.com/bundle/pingid/page/ejd1642076304199.html) and [link2](https://www.pingidentity.com/en/resources/downloads/pingid.html).

Vulnerability/
CVE-2021-41994

medium

6.6

CWE

330 310

30/4/2022

4/8/2024

CVE-2021-41994: PingID iOS mobile application prior to 1.19 vulnerable to pre-computed dictionary attacks

Q: How does the misconfiguration of RSA in the PingID iOS app prior to 1.19 make it vulnerable?

The misconfiguration makes it vulnerable to pre-computed dictionary attacks, leading to an offline MFA bypass when using PingID Windows Login.

First published: Sat Apr 30 2022(Updated: )

A misconfiguration of RSA in PingID iOS app prior to 1.19 is vulnerable to pre-computed dictionary attacks, leading to an offline MFA bypass when using PingID Windows Login.

Credit: responsible-disclosure@pingidentity.com

Affected Software	Affected Version	How to fix
PingID	<1.19
Pingidentity Pingid Integration For Windows Login

Remedy

https://docs.pingidentity.com/bundle/pingid/page/ejd1642076304199.html

Remedy

https://www.pingidentity.com/en/resources/downloads/pingid.html

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the vulnerability ID for this PingID iOS app vulnerability?
The vulnerability ID is CVE-2021-41994.
What is the risk severity of CVE-2021-41994?
The risk severity of CVE-2021-41994 is medium with a severity value of 4.8.
How does the misconfiguration of RSA in the PingID iOS app prior to 1.19 make it vulnerable?
The misconfiguration makes it vulnerable to pre-computed dictionary attacks, leading to an offline MFA bypass when using PingID Windows Login.
Which software versions of the PingID iOS app are affected by CVE-2021-41994?
The versions affected are prior to 1.19.
Where can I find more information and resources about this vulnerability?
You can find more information and resources about this vulnerability in the PingID documentation and downloads page at the following links: [link1](https://docs.pingidentity.com/bundle/pingid/page/ejd1642076304199.html) and [link2](https://www.pingidentity.com/en/resources/downloads/pingid.html).

agent/weakness
agent/type
agent/references
agent/remedy
agent/softwarecombine
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/title
agent/severity
agent/description
agent/first-publish-date
agent/event
agent/author
agent/source
agent/tags
collector/nvd-index
agent/software-canonical-lookup-request
vendor/pingidentity
canonical/pingid
canonical/pingidentity pingid integration for windows login

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.