CVE-2021-23126
[20210301] - Core - Insecure randomness within 2FA secret generation
Summary
[20210301] - Core - Insecure randomness within 2FA secret generation
Original description
The description as published by the source.
An issue was discovered in Joomla! 3.2.0 through 3.9.24. Usage of the insecure rand() function within the process of generating the 2FA secret.
Affected packages
Bitnami
joomla
[{"type":"SEMVER","events":[{"introduced":"3.2.0"},{"fixed":"3.9.25"}]}]
References
- advisory developer.joomla.org
- web nvd.nist.gov