Threats tagged 'ghsa-9fmf-8fw4-3qq7'

This vulnerability allows an attacker who already has valid Administrator credentials to bypass multi-factor authentication (MFA) by disabling MFA globally before completing the verification process. It affects systems where MFA enforcement can be disabled by an administrator prior to authentication completion.