CVE-2022-40722 — Misconfiguration of RSA padding for offline MFA in the PingID Adapter for PingFederate.
A misconfiguration of RSA padding implemented in the PingID Adapter for PingFederate to support Offline MFA with PingID mobile authenticators is vulnerable to pre-computed dicti…
Published: 2023-04-25 · CVSS: 7.7 · CVSS 3.1
A misconfiguration of RSA padding implemented in the PingID Adapter for PingFederate to support Offline MFA with PingID mobile authenticators is vulnerable to pre-computed dictionary attacks, leading to a bypass of offline MFA.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7