CVE-2021-42001

PingID Desktop encryption libraries misconfiguration can lead to sensitive data exposure

High · published April 30, 2022

CVSS v3.1
8.0
EPSS
1%
Percentile
42.3
In the wild
Unconfirmed
What it is

PingID Desktop prior to 1.7.3 has a misconfiguration in the encryption libraries which can lead to sensitive data exposure. An attacker capable of exploiting this vulnerability may be able to successfully complete an MFA challenge via OTP.

The record
Technical detail
CVSS v3.1
8.0 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00505 · 42.3th percentile
Published
2022-04-30T21:15Z
EPSS history
Timeline
  • 30 APR 21:15Z
    PingID Desktop encryption libraries misconfiguration can lead to sensitive data exposure
    cvelistv5