- Project: Joomla!
- SubProject: CMS
- Severity: Medium
- Versions: 3.2.0 through 3.8.1
- Exploit type:
- Reported Date: 2017-October-31
- Fixed Date: 2017-November-07
- CVE Number: CVE-2017-16634
A bug allowed third parties to bypass a user's 2-factor-authentication method.
Joomla! CMS versions 3.2.0 through 3.8.1
Upgrade to version 3.8.2
The JSST at the Joomla! Security Centre.
Reported By: Yarince