Description
A TOTP two-factor authentication bypass vulnerability in
Koollab LMS allowed an
attacker to supply a client-controlled seed to generate a matching one-time
password and bypass the second authentication factor, potentially enabling
unauthorised access to administrator accounts.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Three Learning | Koollab LMS | 5.3.2 | — |