CVE-2019-18985

Pimcore before 6.2.2 lacks brute force protection for the 2FA token.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2019-11-15

Last modified

2024-08-05

Weaknesses

CWE-307

Affected products

• Pimcore (Pimcore)

References

• https://github.com/pimcore/pimcore/commit/9f2d075243a8392c114d9a8028858b9faf041e2d
• https://github.com/pimcore/pimcore/compare/v6.2.1...v6.2.2