CVE-2020-27508 - In two-factor authentication, the system also sending 2fa secret key in response, which enables an intruder to breach the 2fa security

HIGH

In two-factor authentication, the system also sending 2fa secret key in response, which enables an intruder to breach the 2fa security

Published Dec 11, 2020

7.5

HIGH

CVSS 3.1

EPSS 1.34%

In two-factor authentication, the system also sending 2fa secret key in response, which enables an intruder to breach the 2fa security.

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-20018		Advisory
https://github.com/frappe/frappe/pull/11262		x_refsource_MISCPatchThird Party Advisory
https://github.com/frappe/frappe/pull/11263		x_refsource_MISCPatchThird Party Advisory