Skip to content
CVE PROGRAM SOURCE RECORD5.4 Medium

CVE-2022-36249

Shop Beat Services Vulnerable To Bypass 2FA via APIs

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ShopBeat

Description

Shop Beat Solutions (Pty) LTD Shop Beat Media Player 2.5.95 up to 3.2.57 is vulnerable to Bypass 2FA via APIs. For Controlpanel Lite. "After login we are directly able to use the bearer token or jsession ID to access the apis instead of entering the 2FA code. Thus, leading to bypass of 2FA on API level.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Shop Beat studio

  • studio to < 3.2.57affected

References