CVE-2021-42001: PingID Desktop encryption libraries misconfiguration can lead to sensitive data exposure
Published Apr 30, 2022
·Updated
PingID Desktop prior to 1.7.3 has a misconfiguration in the encryption libraries which can lead to sensitive data exposure. An attacker capable of exploiting this vulnerability may be able to successfully complete an MFA challenge via OTP.
Affected Software
2 affected components
pingidentity Pingid Desktop Mac Os X<1.7.3
pingidentity Pingid Desktop Windows<1.7.3
Remediation
Event History
Apr 30, 2022
CVE Published
via MITRE·09:15 PM
Data Sourced
via MITRE·09:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2021-42001?
CVE-2021-42001 is a vulnerability in PingID Desktop prior to version 1.7.3 that allows for sensitive data exposure.
2
How severe is CVE-2021-42001?
CVE-2021-42001 has a severity rating of critical with a value of 9.9.
3
What is the affected software for CVE-2021-42001?
The affected software for CVE-2021-42001 is PingID Desktop prior to version 1.7.3.
4
How can CVE-2021-42001 be exploited?
An attacker capable of exploiting CVE-2021-42001 may be able to successfully complete an MFA challenge via OTP.
5
Where can I find more information about CVE-2021-42001?
You can find more information about CVE-2021-42001 in the PingID Desktop documentation and downloads page.