-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| pimcore/admin-ui-classic-bundle | composer | < 1.2.2 | 1.2.2 |
PHPPHPMiggo AIRoot Cause AnalysisThe vulnerability is directly tied to the logic in the shouldPerformTwoFactorAuthentication method. The patch shows a critical reversal of the conditional return value (from false to true) when checking non-admin firewalls. This function's flawed implementation in vulnerable versions (<1.2.2) explicitly disabled 2FA for non-admin contexts by returning false, violating the intended security controls. The high confidence comes from the direct correlation between the patched code change and the vulnerability description.
Ongoing coverage of React2Shell