CVE-2022-28601

CVE-2022-28601 Una vulnerabilità di bypass dell'autenticazione a due fattori 2FA nel "Simple 2FA Plugin for Moodle" di LMS Doctor Vulnerability Details Rischio : Medio Fornitore: LMS Doctor - Simple 2 Factor Authentication Plugin For Moodle Segnalata da: Flaviu Popescu Descrizione: La vulnerabili...

CVE-2022-28986

CVE-2022-28986 Una vulnerabilità di Insecure Direct Object References IDOR nel "Simple 2FA Plugin for Moodle" di LMS Doctor Dettagli della vulnerabilità Rischio : Critico Fornitore: LMS Doctor - Simple 2 Factor Authentication Plugin For Moodle Divulgato da: Flaviu Popescu Descrizione: Vulnerabili...

CVE-2022-28601

A Two-Factor Authentication 2FA bypass vulnerability in "Simple 2FA Plugin for Moodle" by LMS Doctor allows remote attackers to overwrite the phone number used for confirmation via the profile.php file. Therefore, allowing them to bypass the phone verification mechanism...

CVE-2022-28601

A Two-Factor Authentication 2FA bypass vulnerability in "Simple 2FA Plugin for Moodle" by LMS Doctor allows remote attackers to overwrite the phone number used for confirmation via the profile.php file. Therefore, allowing them to bypass the phone verification mechanism...

CVE-2022-28601

CVE-2022-28601 concerns the Simple 2FA Plugin for Moodle by LMS Doctor. A 2FA bypass exists: remote attackers can overwrite the phone number used for confirmation via profile.php, thus bypassing the phone verification mechanism. The affected component is the Moodle plugin’s 2FA handling; the root...