CVE-2017-16634 In Joomla! before 3.8.2, a bug allowed third parties to bypass a user's 2-factor authentication method.
CriticalCVSS 9.8
EPSS 4.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
In Joomla! before 3.8.2, a bug allowed third parties to bypass a user's 2-factor authentication method.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| joomla | >= 3.2.0, <= 3.8.1 | No fix listed |
References
- 101701 third-party-advisory vdb-entry
- 1039757 third-party-advisory vdb-entry
- developer.joomla.org patch vendor-advisory