← All credits

Ping Identity credits The Commonwealth Bank of Australia for the discovery of this vulnerability.

11 vulnerability records and advisories credit this contributor.

Misconfiguration of RSA padding for offline MFA in the PingID Adapter for PingFederate.

PingID Desktop encryption libraries misconfiguration can lead to sensitive data exposure

PingID Android mobile application prior to 1.19 vulnerable to pre-computed dictionary attacks

PingID Windows Login RSA cryptographic weakness with possible offline MFA bypass

PingID iOS mobile application prior to 1.19 vulnerable to pre-computed dictionary attacks

PingID Mac Login prior to 1.1 vulnerable to pre-computed dictionary attacks

PingID Windows Login prior to 2.8 does not properly set permissions on the Windows Registry entries used to store sensitive API keys under some circumstances

PingID Windows Login prior to 2.8 uses known vulnerable components that can lead to remote code execution

PingID Windows Login prior to 2.8 does not authenticate communication with a local Java service used to capture security key requests

PingID Windows Login prior to 2.8 denial of service condition