Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Pimcore Admin UI has Two Factor Authentication disabled for non admin security firewalls
Vulnerability Description
The Admin Classic Bundle provides a Backend UI for Pimcore. `AdminBundle\Security\PimcoreUserTwoFactorCondition` introduced in v11 disable the two factor authentication for all non-admin security firewalls. An authenticated user can access the system without having to provide the two factor credentials. This issue has been patched in version 1.2.2.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H
Vulnerability Type
使用单一因素认证机制
Vulnerability Title
Pimcore Admin Classic Bundle 安全漏洞
Vulnerability Description
Pimcore是奥地利Pimcore公司的一套开源的用于创建和管理Web应用程序的Web内容管理平台。该平台集成了Web内容管理、电子商务框架和产品信息管理等应用。 Pimcore Admin Classic Bundle 1.2.2之前版本存在安全漏洞，该漏洞源于禁用了所有非管理员安全防火墙的双因素身份验证。
CVSS Information
N/A
Vulnerability Type
N/A