CVE-2022-28601

Published: May 10, 2022

Modified: Aug 3, 2024

PUBLISHED

Description

A Two-Factor Authentication (2FA) bypass vulnerability in "Simple 2FA Plugin for Moodle" by LMS Doctor allows remote attackers to overwrite the phone number used for confirmation via the profile.php file. Therefore, allowing them to bypass the phone verification mechanism.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

https://www.lmsdoctor.com/simple-2-factor-authentication-plugin-for-moodle

x_refsource_MISC

https://github.com/FlaviuPopescu/CVE-2022-28601

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2022-28601

Description

Affected Products

References