Design/Logic Flaw

In JetBrains Hub before 2020.1.12629, an authenticated user can delete 2FA settings of any other user...

CVE-2021-25759

CVE-2021-25759 affects JetBrains Hub prior to 2020.1.12629, where an authenticated user can delete 2FA settings of any other user. This is documented across multiple sources (NVD/Red Hat/CNVD mirrors and the JetBrains Security Bulletin Q4 2020). The JetBrains bulletin states the issue was resolve...

PT-2021-16771

Name of the Vulnerable Software and Affected Versions JetBrains Hub versions prior to 2020.1.12629 Description The issue allows an authenticated user to delete 2FA settings of any other user. Recommendations For versions prior to 2020.1.12629, update to version 2020.1.12629 or later to resolve th...

CVE-2021-25759: Undefined Security Weakness

In JetBrains Hub before 2020.1.12629, an authenticated user can delete 2FA settings of any other user...

Coinbase: 2FA settings allowed to be changed with no delay/freeze on funds

With the nature of bitcoin's instant transactions and the increase level of phishing/malware attempts on users, many bitcoin related businesses have freeze/delays on funds once a user changes their 2FA settings. That design keeps the 2FA from being defeated instantly if the user's email account h...