A misconfiguration of RSA in PingID iOS app prior to 1.19 is vulnerable to pre-computed dictionary attacks, leading to an offline MFA bypass when using PingID Windows Login.
CVSS 3.1MEDIUM 6.6·Physical·High privileges·No interaction·EPSS 0.0024·Published 2022-04-30·Fixed in 1.19CWE-310
A misconfiguration of RSA in PingID Android app prior to 1.19 is vulnerable to pre-computed dictionary attacks, leading to an offline MFA bypass when using PingID Windows Login.
CVSS 3.1MEDIUM 6.6·Physical·High privileges·No interaction·EPSS 0.0024·Published 2022-04-30·Fixed in 1.19CWE-310