CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N
EPSS
Percentile
17.5%
A misconfiguration of RSA padding implemented in the PingID Adapter for PingFederate to support Offline MFA with PingID mobile authenticators is vulnerable to pre-computed dictionary attacks, leading to a bypass of offline MFA.
Vendor | Product | Version | CPE |
---|---|---|---|
pingidentity | pingfederate | * | cpe:2.3:a:pingidentity:pingfederate:*:*:*:*:*:*:*:* |
pingidentity | pingid_adapter_for_pingfederate | * | cpe:2.3:a:pingidentity:pingid_adapter_for_pingfederate:*:*:*:*:*:*:*:* |
pingidentity | pingid_integration_kit | * | cpe:2.3:a:pingidentity:pingid_integration_kit:*:*:*:*:*:*:*:* |