Back to feed
EUVD-2021-28982 · Published Apr 30, 2022
A misconfiguration of RSA in PingID Windows Login prior to 2.7 is vulnerable to pre-computed dictionary attacks, leading to an offline MFA bypass.
Technologies
Pingidentity Pingid Integration For Windows Login
Weaknesses
CWE-288CWE-287CWE-310
CVSS scores
- v3.15.6
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N - v2.01.9
AV:L/AC:M/Au:N/C:P/I:N/A:N
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Persistence Privilege Escalation Stealth Defense Impairment Credential Access Discovery
References
Potentially impacted assets
See if this affects your attack surface
