critical9.8
CVE-2017-16634
In Joomla!
Impact
In Joomla! before 3.8.2, a bug allowed third parties to bypass a user's 2-factor authentication method.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Joomla | Joomla\! | from 3.2.0 through 3.8.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/101701
- http://www.securitytracker.com/id/1039757
- https://developer.joomla.org/security-centre/713-20171102-core-2-factor-authentication-bypass
- http://www.securityfocus.com/bid/101701
- http://www.securitytracker.com/id/1039757
- https://developer.joomla.org/security-centre/713-20171102-core-2-factor-authentication-bypass