Lucene search
MitreCVELIST:CVE-2022-28601HistoryMay 10, 2022 - 8:42 p.m.
CVE-2022-28601
2022-05-1020:42:50
mitre
www.cve.org
4
cve-2022-28601
remote attackers
phone number overwrite
EPSS
0.001
Percentile
40.3%
A Two-Factor Authentication (2FA) bypass vulnerability in “Simple 2FA Plugin for Moodle” by LMS Doctor allows remote attackers to overwrite the phone number used for confirmation via the profile.php file. Therefore, allowing them to bypass the phone verification mechanism.
Related
nvd
nvd
CVE-2022-28601
2022-05-10 21:15:11
cve
cve
CVE-2022-28601
2022-05-10 21:15:11
prion
prion
Authentication flaw
2022-05-10 21:15:00