Passwork before 6.2.0 allows remote authenticated users to bypass 2FA by sending all one million of the possible 6-digit codes.

Published Dec 26, 2023 · Updated Aug 2, 2024 · Assigned by mitre