https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 12:30:22 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-10170 EUVD-2026-10170 https://cve.radiocsirt.org/vuln/euvd-2026-10170 https://cve.radiocsirt.org/vuln/fkie_cve-2023-49075 <p>The Admin Classic Bundle provides a Backend UI for Pimcore. `AdminBundle\Security\PimcoreUserTwoFactorCondition` introduced in v11 disable the two factor authentication for all non-admin security firewalls. An authenticated user can access the system without having to provide the two factor credentials. This issue has been patched in version 1.2.2.</p> <p>The Admin Classic Bundle provides a Backend UI for Pimcore. `AdminBundle\Security\PimcoreUserTwoFactorCondition` introduced in v11 disable the two factor authentication for all non-admin security firewalls. An authenticated user can access the system without having to provide the two factor credentials. This issue has been patched in version 1.2.2.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-49075 https://cve.radiocsirt.org/vuln/ghsa-9wwg-r3c7-4vfg <p><strong>Affected:</strong> Packagist: pimcore/admin-ui-classic-bundle</p> <p>### Impact `AdminBundle\Security\PimcoreUserTwoFactorCondition` introduced in v11 disable the two factor authentication for all non-admin security firewalls.</p> <p>An authenticated user can access the system without having to provide the 2 factor credentials.</p> <p>### Patches Apply patch https://patch-diff.githubusercontent.com/raw/pimcore/admin-ui-classic-bundle/pull/345.patch</p> <p>### Workarounds Upgrade to version 1.2.2 or apply the [patch](https://patch-diff.githubusercontent.com/raw/pimcore/admin-ui-classic-bundle/pull/345.patch) manually.</p> <p><strong>Affected:</strong> Packagist: pimcore/admin-ui-classic-bundle</p> <p>### Impact `AdminBundle\Security\PimcoreUserTwoFactorCondition` introduced in v11 disable the two factor authentication for all non-admin security firewalls.</p> <p>An authenticated user can access the system without having to provide the 2 factor credentials.</p> <p>### Patches Apply patch https://patch-diff.githubusercontent.com/raw/pimcore/admin-ui-classic-bundle/pull/345.patch</p> <p>### Workarounds Upgrade to version 1.2.2 or apply the [patch](https://patch-diff.githubusercontent.com/raw/pimcore/admin-ui-classic-bundle/pull/345.patch) manually.</p> https://cve.radiocsirt.org/vuln/ghsa-9wwg-r3c7-4vfg https://cve.radiocsirt.org/vuln/gsd-2023-49075 gsd-2023-49075 https://cve.radiocsirt.org/vuln/gsd-2023-49075