CVE-2021-41995

Опубликовано: 30 июн. 2022

Источник: nvd

CVSS3: 7.7

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

A misconfiguration of RSA in PingID Mac Login prior to 1.1 is vulnerable to pre-computed dictionary attacks, leading to an offline MFA bypass.

Конфигурация 1

Одновременно

cpe:2.3:a:pingidentity:pingid_integration_for_mac_login:*:*:*:*:*:*:*:*

Версия до 1.1 (исключая)

cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*

EPSS

Процентиль: 48%

0.00248

Низкий

7.7 High

CVSS3

7.5 High

CVSS3

5 Medium

CVSS2

CWE-288

CWE-287

GHSA-cvx4-2j8v-rqmj

CVSS3: 7.5

github

больше 3 лет назад

A misconfiguration of RSA in PingID Mac Login prior to 1.1 is vulnerable to pre-computed dictionary attacks, leading to an offline MFA bypass.

EPSS

Процентиль: 48%

0.00248

Низкий

7.7 High

CVSS3

7.5 High

CVSS3

5 Medium

CVSS2

CWE-288

CWE-287