Approved changes feed: RSS · Atom

cpe:2.3:a:lmsdoctor:2_factor_authentication:-:*:*:*:*:moodle:*:*

part: a version: - update: *

VendorLmsdoctor (a33a66f5-e3c9-5a82-863e-f062cebcf101)
Product2 Factor Authentication (78c602ff-2dea-5088-aeea-9dfd48bbc6c3)
Edition*
Language*
Software edition*
Target softwaremoodle
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-28601 vulnerable 2026-06-08 05:42:44.634674 Details available
A Two-Factor Authentication (2FA) bypass vulnerability in "Simple 2FA Plugin for Moodle" by LMS Doctor allows remote attackers to overwrite the phone number used for confirmation via the profile.php file. Therefore, allowing them to bypass the phone verification mechanism.
Published: 2022-05-10T20:42:50.000Z
Updated: 2024-08-03T05:56:16.203Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.