Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Shop Beat Services Vulnerable To Bypass 2FA via APIs
Vulnerability Description
Shop Beat Solutions (Pty) LTD Shop Beat Media Player 2.5.95 up to 3.2.57 is vulnerable to Bypass 2FA via APIs. For Controlpanel Lite. "After login we are directly able to use the bearer token or jsession ID to access the apis instead of entering the 2FA code. Thus, leading to bypass of 2FA on API level.
CVSS Information
N/A
Vulnerability Type
使用候选路径或通道进行的认证绕过
Vulnerability Title
Shop Beat Media Player 访问控制错误漏洞
Vulnerability Description
Shop Beat是Shop Beat公司的一个媒体播放器。 Shop Beat Media Player 2.5.95 版本到 3.2.57 版本存在安全漏洞，该漏洞源于登录后可以直接使用不记名令牌或 jsession ID 访问 API，从而绕过二次验证。
CVSS Information
N/A
Vulnerability Type
N/A