CVE-2021-42001: Pingidentity Pingid Desktop

Critical severity, CVSS 9.9. EPSS: 0.5% chance of exploitation in the next 30 days.

PingID Desktop prior to 1.7.3 has a misconfiguration in the encryption libraries which can lead to sensitive data exposure. An attacker capable of exploiting this vulnerability may be able to successfully complete an MFA challenge via OTP.

Affected products

• Pingidentity Pingid Desktop: before 1.7.3 (fixed in 1.7.3)

Published 2022-04-30. Last modified 2026-06-17.