CVE-2021-43177

As a result of an incomplete fix for CVE-2015-7225, in versions of devise-two-factor prior to 4.0.2 it is possible to reuse a One-Time-Password (OTP) for one…

published April 11, 2022

CVSS
—
EPSS
1%
Percentile
58.8
In the wild
Unconfirmed
What it is

As a result of an incomplete fix for CVE-2015-7225, in versions of devise-two-factor prior to 4.0.2 it is possible to reuse a One-Time-Password (OTP) for one (and only one) immediately trailing interval. CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N)

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00884 · 58.8th percentile
Published
2022-04-11T19:37Z
EPSS history
Timeline
  • 11 APR 19:37Z
    As a result of an incomplete fix for CVE-2015-7225, in versions of devise-two-factor prior to 4.0.2 it is possible to reuse a One-Time-Password (OTP) for one…
    cvelistv5