CVE-2022-40722

MEDIUM Year: 2022
CVSS v3 Score
5.8
Medium
Weakness Type
CWE-780
View all →

Vulnerability Description

A misconfiguration of RSA padding implemented in the PingID Adapter for PingFederate to support Offline MFA with PingID mobile authenticators is vulnerable to pre-computed dictionary attacks, leading to a bypass of offline MFA.

Related Vulnerabilities

CVE-2024-51456

MEDIUM
CVSS:5.9(Medium)

IBM Robotic Process Automation 21.0.0 through 21.0.7.19 and 23.0.0 through 23.0.19 could allow a remote attacker to obtain sensitive data that may be exposed through certain crypto-analytic attacks.

CWE-7802024

CVE-2024-51456

MEDIUM
CVSS:5.9(Medium)

IBM Robotic Process Automation 21.0.0 through 21.0.7.19 and 23.0.0 through 23.0.19 could allow a remote attacker to obtain sensitive data that may be exposed through certain crypto-analytic attacks.

CWE-7802024