CVE-2025-6675 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Enterprise MFA - TFA for Drupal allows Authentication Bypass.This issue affects…
Medium CVSS: 4.8

CVE-2025-6675

Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Enterprise MFA - TFA for Drupal allows Authentication Bypass.This issue affects Enterprise MFA - TFA for Drupal: from 0.0.0 before 4.8.0, from 5.2.0 before 5.2.1, from 0.0.0 before 5.0.*, from 0.0.0 before 5.1.*.
Vendor
Miniorange
Product
Miniorange 2fa
CWE
CWE-288
Yayın Tarihi
2025-06-26 14:15:34
Güncelleme
2025-07-14 18:10:08
Source Identifier
mlhess@drupal.org
KEV Date Added
-

Kategoriler

CWE-288 Miniorange 2fa MEDIUM Miniorange 2025

Referanslar

https://www.drupal.org/sa-contrib-2025-082