VULNERABILITY INTELLIGENCE

CVE-2021-42001

CVSS score8 HIGH
EPSS probability0.51%
CISA KEVNot currently listed
Published2022-04-30
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

Description

PingID Desktop prior to 1.7.3 has a misconfiguration in the encryption libraries which can lead to sensitive data exposure. An attacker capable of exploiting this vulnerability may be able to successfully complete an MFA challenge via OTP.

Primary references