CVE-2021-41992

Опубликовано: 30 апр. 2022

Источник: nvd

CVSS3: 7.7

CVSS3: 5.6

CVSS2: 1.9

EPSS Низкий

Описание

A misconfiguration of RSA in PingID Windows Login prior to 2.7 is vulnerable to pre-computed dictionary attacks, leading to an offline MFA bypass.

Конфигурация 1

cpe:2.3:a:pingidentity:pingid_integration_for_windows_login:*:*:*:*:*:*:*:*

Версия до 2.7 (исключая)

EPSS

Процентиль: 35%

0.00148

Низкий

7.7 High

CVSS3

5.6 Medium

CVSS3

1.9 Low

CVSS2

CWE-288

CWE-287

GHSA-r2cf-3rwp-j3r7

CVSS3: 9.8

github

почти 4 года назад

A misconfiguration of RSA in PingID Windows Login prior to 2.7 is vulnerable to pre-computed dictionary attacks, leading to an offline MFA bypass.

EPSS

Процентиль: 35%

0.00148

Низкий

7.7 High

CVSS3

5.6 Medium

CVSS3

1.9 Low

CVSS2

CWE-288

CWE-287