Description
An low privileged remote attacker in possession of the second factor for another user can login as that user without knowledge of the other user`s password.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
MB connect line mbCONNECT24
Default version status: unaffected
0 to < 2.16.5affected
MB connect line mymbCONNECT24
Default version status: unaffected
0 to < 2.18.0affected
MB connect line mymbCONNECT24
Default version status: unaffected
0 to < 2.18.0affected
MB connect line mymbCONNECT24
Default version status: unaffected
0 to < 2.16.5affected
Helmholz myREX24
Default version status: unaffected
0 to < 2.18.0affected
Helmholz myREX24
Default version status: unaffected
0 to < 2.16.5affected
Helmholz myREX24.virtual
Default version status: unaffected
0 to < 2.18.0affected
Helmholz myREX24.virtual
Default version status: unaffected
0 to < 2.16.5affected