CVE-2021-41992

HIGH

PingID Integration for Windows Login < 2.7 - Offline MFA Bypass via RSA Misconfiguration

Title source: llm

A misconfiguration of RSA in PingID Windows Login prior to 2.7 is vulnerable to pre-computed dictionary attacks, leading to an offline MFA bypass.

Core 2

Core References

Product x_refsource_misc

Vendor Advisory x_refsource_misc

CVSS v3 7.7

EPSS 0.0046

EPSS Percentile 36.3%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N

CWE

CWE-310 CWE-287 CWE-288

Status published

Products (1)

pingidentity/pingid_integration_for_windows_login < 2.7

Published Apr 30, 2022

Tracked Since Feb 18, 2026