Описание
WorkOS Hosted AuthKit before 2025-01-07 allows a password authentication MFA bypass (by enrolling a new authentication factor) when the attacker knows the user's password. No exploitation occurred.
EPSS
Процентиль: 26%
0.0033
Низкий
6 Medium
CVSS3
Дефекты
CWE-305
Связанные уязвимости
CVSS3: 6
github
больше 1 года назад
WorkOS Hosted AuthKit before 2025-01-07 allows a password authentication MFA bypass (by enrolling a new authentication factor) when the attacker knows the user's password. No exploitation occurred.
EPSS
Процентиль: 26%
0.0033
Низкий
6 Medium
CVSS3
Дефекты
CWE-305