Description
Pimcore before 6.2.2 lacks brute force protection for the 2FA token.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | pimcore/pimcore | < 6.2.2 | 6.2.2 | GHSA-hf62-5vxh-jpwj |
Critical · 9.8
CVE-2019-18985
EUVD-2022-4131GHSA-hf62-5vxh-jpwj
Pimcore 2FA Vulnerable to Brute Forcing
Published Nov 15, 2019 · Updated Aug 5, 2024 · Assigned by mitre