CVE-2023-49949

Passwork before 6.2.0 allows remote authenticated users to bypass 2FA by sending all one million of the possible 6-digit codes

published December 26, 2023

CVSS
—
EPSS
1%
Percentile
49.7
In the wild
Unconfirmed
What it is

Passwork before 6.2.0 allows remote authenticated users to bypass 2FA by sending all one million of the possible 6-digit codes.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00632 · 49.7th percentile
Published
2023-12-26T00:00Z
EPSS history
Timeline
  • 26 DEC 00:00Z
    Passwork before 6.2.0 allows remote authenticated users to bypass 2FA by sending all one million of the possible 6-digit codes
    cvelistv5