CVE-2021-21329CWE-287

Multi Factor Authentication Token Improperly Validated On User Login

High · published March 8, 2021

CVSS v3.1
8.7
EPSS
2%
Percentile
75.9
In the wild
Unconfirmed
What it is

RATCF is an open-source framework for hosting Cyber-Security Capture the Flag events. In affected versions of RATCF users with multi factor authentication enabled are able to log in without a valid token. This is fixed in commit cebb67b.

The record
Technical detail
CVSS v3.1
8.7 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.01621 · 75.9th percentile
Weakness
CWE-287 · Improper Authentication
Published
2021-03-08T17:15Z
EPSS history
Timeline
  • 08 MAR 17:15Z
    Multi Factor Authentication Token Improperly Validated On User Login
    cvelistv5