CVE-2019-18985 - Pimcore before 6.2.2 lacks brute force protection for the 2FA token

CRITICAL

Pimcore before 6.2.2 lacks brute force protection for the 2FA token

Published Nov 15, 2019

9.8

CRITICAL

CVSS 3.1

EPSS 1.44%

Pimcore before 6.2.2 lacks brute force protection for the 2FA token.

No remediation recorded yet.

Weaknesses (1)

CWE-307

Link	Providers	Tags
https://github.com/advisories/GHSA-hf62-5vxh-jpwj		Advisory
https://github.com/pimcore/pimcore/commit/9f2d075243a8392c114d9a8028858b9faf041e2d		x_refsource_MISCPatchThird Party Advisory
https://github.com/pimcore/pimcore/compare/v6.2.1...v6.2.2		x_refsource_MISCPatchThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2019-18985

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Nov 15, 2019

Updated Aug 5, 2024

Reserved Nov 15, 2019

Updated n/a

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a