Beveiligingsadvies

CVE-2023-49075

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-11-28 04:33:23

Laatst bijgewerkt 2024-08-02 21:46:29

Toegewezen door GitHub_M

CVSS-score 8.5

Status PUBLISHED

Beschrijving

The Admin Classic Bundle provides a Backend UI for Pimcore. `AdminBundle\Security\PimcoreUserTwoFactorCondition` introduced in v11 disable the two factor authentication for all non-admin security firewalls. An authenticated user can access the system without having to provide the two factor credentials. This issue has been patched in version 1.2.2.

← Alle CVE's bekijken Bekijk op cve.org ↗